Number of Introduction Points for a (SingleOnion?) HS seems variable, or degrades with time
I'm helping some people tune a very large Tor Onion site which has recently converted to 2.9.9 and Single Onions.
There have been some strange reachability issues which I am helping triage.
Analysis is tricky because independent copies of the onion exist in two different datacentres, and they both descriptors into the HSDirs.
To date this configuration has not contributed to any outages that we're aware.
For this ticket the specific onion address is "fbsbx2q4mvcl63pw" - though at least one other onion address (out of 3) has been showing the same symptoms.
All onions are configured with "HiddenServiceNumIntroductionPoints 10"
I have been monitoring the Onion descriptors with a Stem script* that prints the HS Descriptor IPs, and over time the listed IPs appear to drop from the expected 10, to as low as 4.
Partial output from the script log, for this morning, is at:
At 0800h the IPs in retrieved HSDescriptor (reminder: from one of two purposely-duplicated HS instances) looked like this, lines 1..12 in the Gist; note NumIntroductionPoints/nip=10
Mon 13 Feb 2017 08:00:55 GMT v=2 age=55 nip=10 pub(2017-02-13 08:00:00) now(2017-02-13 08:00:55) fbsbx2q4mvcl63pw 0: 22.214.171.124:443 1: 126.96.36.199:9001 2: 188.8.131.52:443 3: 184.108.40.206:9001 4: 220.127.116.11:21 5: 18.104.22.168:443 6: 22.214.171.124:9001 7: 126.96.36.199:21 8: 188.8.131.52:9001 9: 184.108.40.206:9001
Yet further down the file, a different descriptor, possibly from the other instance (lines 50-57)
Mon 13 Feb 2017 08:21:03 GMT v=2 age=1263 nip=6 pub(2017-02-13 08:00:00) now(2017-02-13 08:21:03) fbsbx2q4mvcl63pw 0: 220.127.116.11:443 1: 18.104.22.168:9001 2: 22.214.171.124:21 3: 126.96.36.199:9001 4: 188.8.131.52:9001 5: 184.108.40.206:9001
...only 6 introduction points.
If we assume (?) that it's unlikely for the two daemons to pick the same introduction point, the fact that "220.127.116.11:443" is present in all the descriptors in lines 40..150 suggests that all these descriptors are from the same daemon instance - however the number of introduction points varies.
See attached image for highlight. Is this expected?