Because of legacy/trac#14202 (moved), directory authorities now can assign HSDir flag to a relay without a DirPort. However, relays don't accept BEGIN_DIR cells if options->DirPort_set is set to 0 (see directory_permits_begindir_requests()).
This is very problematic right now because as I'm opening this bug, we currently have 4348 HSDir in the consensus but 1497 of them (34%) of them don't have a DirPort thus not working.
Unless all relay updates with the patch, this situation will continue thus we should maybe bring back the need for a DirPort to get the HSDir flag on the autority sides?
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Child items 0
Show closed items
No child items are currently assigned. Use child items to break down this issue into smaller parts.
Linked items 0
Link issues together to show that they're related.
Learn more.
From Torperf logs, thanks to karsten for doing this graph, we can clearly see the issue being resolved. See the attached graph hsdesc-fetches-unknown.png.
I strongly suspect this is fixed in legacy/trac#12538 (moved), as it makes all relays directory caches, and has them respond to BEGIN_DIR. (Unless they're bandwidth-constrained.)
Can someone check it works for HSDir functionality?
Trac: Severity: N/Ato Normal Status: assigned to needs_information
I strongly suspect this is fixed in legacy/trac#12538 (moved), as it makes all relays directory caches, and has them respond to BEGIN_DIR. (Unless they're bandwidth-constrained.)
Can someone check it works for HSDir functionality?
This should be fixed yes. We have couple of relays already that are advertising tunnelled-dir-server for which they have the HSDir flag. No relay right now has no DirPort and advertises this option so I've restarted my relay with master and disabled the DirPort. We'll see in 96 hours if this works out but I don't see how it shouldn't but we can be surprised! :)
Let's keep this ticket open until we really confirm that it's working in the network. Will close once I have a confirmation. Would be good also if someone can confirm as well.
Ok I was confused 12 days ago apparently. We won't be able to confirmed it works in the tor network until most dirauth upgrade to 028.
However, I can confirm that relay with 028 do advertise tunnelled-dir-server. I have a relay without a DirPort running on 028 so once majority of dirauth migrate, I'll closely watch this to make sure it's working as expected. Closing for now and we'll reopen in case it goes south.
Trac: Status: accepted to closed Resolution: N/Ato fixed