Commit 742479de authored by emmapeel's avatar emmapeel 🤖
Browse files

Merge remote-tracking branch 'ggus/community-resources'

parents 7557129f 02bc5b61
......@@ -22,7 +22,7 @@ Exit relay operators should understand the potential risks associated with runni
For the majority of operators in most countries, bridges and guard/middle relays are very low risk.
Exits are the ones that present some legal concerns, but operators under most circumstances will be able to handle legal matters by having an abuse response letter, running the exit from a location that isn't their home, and reading through some of the legal resources that Tor-supportive lawyers have put together.
The [EFF Tor Legal FAQ](/eff-tor-legal-faq) answers many common questions about relay operation and the law. We also like [Noisebridge's wiki](https://www.noisebridge.net/wiki/Noisebridge_Tor/FBI) for additional legal resources.
The [EFF Tor Legal FAQ](/relay/community-resources/eff-tor-legal-faq) answers many common questions about relay operation and the law. We also like [Noisebridge's wiki](https://www.noisebridge.net/wiki/Noisebridge_Tor/FBI) for additional legal resources.
In general it's a good idea to consult with a lawyer before deciding to operate an exit relay, especially if you live in a place where exit relay operators have been harassed, or if you're the only exit relay operator in your region.
Get in touch with your local digital rights organization to see if they have recommendations about legal assistance, and if you're not sure what organizations are working in your region, [write to EFF](https://www.eff.org/about/contact) and see if they can help connect you.
......
......@@ -8,7 +8,7 @@ NOTE: This FAQ is for informational purposes only and does not constitute legal
Also, if you received this document from anywhere besides the EFF web site or https://community.torproject.org/relay/community-resources/eff-tor-legal-faq, it may be out of date. Follow the link to get the latest version.
Got a DMCA notice? Check out our [sample response letter](/tor-dmca-response)!
Got a DMCA notice? Check out our [sample response letter](/relay/community-resources/eff-tor-legal/faq/tor-dmca-response)!
## General Information
......
......@@ -6,13 +6,13 @@ body:
Written by the Electronic Frontier Foundation ([EFF](https://www.eff.org/)). Last updated May 31, 2011.
Note to Tor relay operators: In this litigious era, anyone providing routing services may face copyright complaints for transmitted content. Fortunately, the Digital Millennium Copyright Act safe harbors should provide protections from many of them both to you and to your upstream provider. If your Internet host forwards a DMCA copyright complaint to you, you can use this template to write a response, though you will need to customize it to your situation. Please also ensure all the statements are true for you. (The Tor Project has an [abuse collection of templates](/tor-abuse-templates/) to help you respond to other types of abuse complaints, too.) Before sending any response to your ISP, you may want to seek the advice of an attorney licensed to practice in your jurisdiction.
Note to Tor relay operators: In this litigious era, anyone providing routing services may face copyright complaints for transmitted content. Fortunately, the Digital Millennium Copyright Act safe harbors should provide protections from many of them both to you and to your upstream provider. If your Internet host forwards a DMCA copyright complaint to you, you can use this template to write a response, though you will need to customize it to your situation. Please also ensure all the statements are true for you. (The Tor Project has an [abuse collection of templates](/relay/community-resources/tor-abuse-templates/) to help you respond to other types of abuse complaints, too.) Before sending any response to your ISP, you may want to seek the advice of an attorney licensed to practice in your jurisdiction.
This template letter is for informational purposes only and does not constitute legal advice. Whether and how you should respond when you or your ISP has received a DMCA notice will turn on the particular facts of your situation. This template is intended as a starting point, but you should tailor it to your own circumstances. In addition, it's up to you to comply with your ISP's terms of service. If you're not comfortable including so much legal explanation, feel free to invite the ISP to contact EFF for a fuller discussion.
If you do not believe the safe harbors apply to your particular situation, don't use this template as a basis for your response. Specific information about safe harbor qualification for "transitory digital network communications" is provided on the Chilling Effects website [here](https://www.chillingeffects.org/dmca512/faq.cgi#QID586) and also in the template, below.
Also, if you received this document from anywhere other than the EFF web site or [tor-dmca-response](/tor-dmca-response), it may be out of date. Follow the link to get the latest version.
Also, if you received this document from anywhere other than the EFF web site or [tor-dmca-response](/relay/community-resources/eff-tor-legal-faq/tor-dmca-response), it may be out of date. Follow the link to get the latest version.
```
......
......@@ -8,16 +8,16 @@ This page aims to list community experiences with Tor and various Internet Servi
Be sure to provide useful information like how much bandwidth you pushed, whether you thought the deal was cheap or expensive, how hard you had to work to make them understand what's going on, how long your server has been running, and whether you'd recommend them to others. Also include dates.
Since non-exits do not attract complaints, it should be fine to run them without contacting the hoster first. Make sure you understand their policies regarding bandwidth, especially on "unlimited" (fair use) contracts. For exit relays, you should read the fine [Tor Exit Guidelines](tor-exit-guidelines) first.
Since non-exits do not attract complaints, it should be fine to run them without contacting the hoster first. Make sure you understand their policies regarding bandwidth, especially on "unlimited" (fair use) contracts. For exit relays, you should read the fine [Tor Exit Guidelines](/relay/community-resources/tor-exit-guidelines) first.
For network diversity and stronger anonymity, you should avoid providers and countries that already attract a lot of Tor capacity. [Metrics](https://metrics.torproject.org/) is a great tool that allows you to group probabilities by country and AS (autonomous systems), so you can more easily identify networks you want to avoid.
**Try to avoid** the following hosters:
**Try to avoid** the following hosters:
* OVH SAS (AS16276)
* Online S.a.s. (AS12876)
* Hetzner Online GmbH (AS24940)
* DigitalOcean, LLC (AS14061)
* OVH SAS (AS16276)
* Online S.a.s. (AS12876)
* Hetzner Online GmbH (AS24940)
* DigitalOcean, LLC (AS14061)
**Note**: This page is currently being revamped. If you would like to help out please see [#31063](https://trac.torproject.org/projects/tor/ticket/31063).
......@@ -306,10 +306,6 @@ For network diversity and stronger anonymity, you should avoid providers and cou
| [Xmission](https://www.xmission.com/) | - | Yes | Yes | Yes | - | 01/28/15 |
| [blackpulsehosting](https://www.blackpulsehosting.com) | - | Yes | Yes | No | - | 10/25/15 |
| [MonkeyBrains](https://monkeybrains.net) | AS32329 | Yes | Yes | Yes | Only offers colocation, no cheap VPS option. | 1/14/19 |
---
html: two-columns-page.html
---
......
_model: page
---
title: Swags
title: Swag
---
body:
......@@ -10,7 +10,7 @@ You can get one of these fine Tor T-shirts for contributing to the Tor project.
* Help out in other ways. Maintain a translation. Run Tor trainings. Write a good support program and get a lot of people to use it. Do research on Tor and anonymity, solve some of our bugs, or establish yourself as a Tor advocate.
If you're operating a fast relay or you've done something else cool, email us at tshirt@torproject.org with the details. (We want to make sure our shirts help outreach happen all around the world, so please understand if we can't send you 5 shirts for your 5 excellent relays.)
If you're operating a fast relay or you've done something else cool, email us at tshirt at torproject.org with the details. (We want to make sure our shirts help outreach happen all around the world, so please understand if we can't send you 5 shirts for your 5 excellent relays.)
There are a variety of colors, shapes, and sizes available in the great roots design that Leiah Jansen made for us, as well as some older designs.
---
......@@ -22,4 +22,4 @@ section: Community Resources
---
section_id: community-resources
---
subtitle: If you're operating a fast relay or you've done something else cool, you're eligible to receive our swags
subtitle: If you're operating a fast relay or you've done something else cool, you're eligible to receive our swag
......@@ -212,7 +212,7 @@ If a serious abuse complaint not covered by this template set arrives, the best
## Other Template Sets
* [DMCA Response template for Tor node maintainer to ISP](community-resources/eff-tor-legal-faq/) as written by the [EFF](http://www.eff.org).
* [DMCA Response template for Tor node maintainer to ISP](/relay/community-resources/eff-tor-legal-faq/) as written by the [EFF](http://www.eff.org).
* Torservers [response template emails](https://www.torservers.net/wiki/abuse/templates).
---
html: two-columns-page.html
......
......@@ -17,7 +17,7 @@ Therefore, please do not act on this information alone; if you have any specific
Find some professors (or deans!) who like the idea of supporting and/or researching anonymity on the Internet.
If possible, use an extra IP range whose abuse contact doesn't go through the main university abuse team. Ideally, use addresses that are not trusted by the IP-based authentication many library-related services use -- if the university's entire IP address space is "trusted" to access these library resources, the university is forced to maintain an iron grip on all its addresses.
Also read [How do I make my University / ISP / etc happy with my exit node?](tor-relay-universities)
Also read [How do I make my University / ISP / etc happy with my exit node?](/relay/community-resources/tor-relay-universities/)
### Find Tor-friendly ISPs.
......@@ -53,7 +53,7 @@ If you country is missing here and you know a lawyer who can provide a legal opi
### If you're part of an organization that will be running the exit relay (ISP, university etc), consider teaching your legal people about Tor.
It's way better for them to hear about Tor from you, in a relaxed environment, than to hear about it from a stranger over the phone. Make them aware of [EFF's Legal FAQ for Tor Operators](https://2019.www.torproject.org/eff/tor-legal-faq). EFF has also offered to talk to other lawyers to explain the legal aspects of Tor; contact us at support@torservers.net and we'll make the connections for you.
It's way better for them to hear about Tor from you, in a relaxed environment, than to hear about it from a stranger over the phone. Make them aware of [EFF's Legal FAQ for Tor Operators](/relay/community-resources/eff-tor-legal-faq). EFF has also offered to talk to other lawyers to explain the legal aspects of Tor.
### If you're not part of an organization, think about starting one!
......@@ -92,7 +92,7 @@ In your reply, state clearly that you are not liable for forwarded content passi
One of the biggest reasons exit relays disappear is because the people answering the abuse address get nervous and ask you to stop.
If you can get your own IP block, great. Even if not, many providers will still reassign subblocks to you if you ask.
ARIN uses [SWIP](https://www.arin.net/resources/request/reassignments.html), and RIPE uses something similar. You can also add comments to your range, hinting at your usage as anonymization service ([Example](https://apps.db.ripe.net/search/query.html?searchtext=ZWIEBELFREUNDE)).
If you have questions about the process, please write an email to support@torservers.net and we will try to explain the process to you.
If you have questions about the process, please write an email to [tor-relays mailing list](https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays) and we will try to explain the process to you.
### Register a phone number and a fax number as abuse contact.
......@@ -100,10 +100,10 @@ At least law enforcement in Germany regularly uses the fax and phone numbers pre
### Consider using the Reduced Exit Policy.
The [Reduced Exit Policy](FIXME) is an alternative to the default exit policy. It allows many Internet services while still blocking the majority of TCP ports.
This drastically reduces the odds that a Bittorrent user will select your node and thus reduces or even eliminates the number of [DMCA complaints](https://2019.www.torproject.org/eff/tor-dmca-response) you will receive.
The [Reduced Exit Policy](https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy) is an alternative to the default exit policy. It allows many Internet services while still blocking the majority of TCP ports.
This drastically reduces the odds that a Bittorrent user will select your node and thus reduces or even eliminates the number of [DMCA complaints](/relay/community-resources/eff-tor-legal-faq/tor-dmca-response/) you will receive.
If you have your own experience of abuse handling, just share it on our public mailing list or write us an email to tor-assistants@torproject.org.
If you have your own experience of abuse handling, just share it on our public mailing list or write us an email to frontdesk@torproject.org.
## Technical
......
......@@ -17,15 +17,15 @@ Most likely it is ambiguously worded, to let them allow or deny things based on
But it might be extremely restrictive ("no services of any kind"), in which case you're going to have a tough road ahead of you.
* Second, learn about your local laws with respect to liability of traffic that exits from your Tor relay.
In the US, these appear to be mainly the [DMCA](https://2019.www.torproject.org/eff/tor-legal-faq.html#DMCA) and [CDA](https://2019.www.torproject.org/eff/tor-legal-faq.html#Lawsuits), and the good news is that many lawyers believe that Tor exit node operators are in the same boat as the ISPs themselves.
Become familiar with [the EFF's template letter regarding DMCA notices for Tor](https://2019.www.torproject.org/eff/tor-dmca-response.html), which is quite clear about not putting liability on service providers.
In the US, these appear to be mainly the [DMCA](/relay/community-resources/eff-tor-legal-faq/) and [CDA](/relay/community-resources/eff-tor-legal-faq/), and the good news is that many lawyers believe that Tor exit node operators are in the same boat as the ISPs themselves.
Become familiar with [the EFF's template letter regarding DMCA notices for Tor](/relay/community-resources/eff-tor-legal-faq/tor-dmca-response/), which is quite clear about not putting liability on service providers.
The CDA is less clear, because it was written before the modern Internet emerged, but EFF and ACLU are optimistic.
Of course, you need to understand that without actual clear precedent (and even then), it's still possible that a given judge will not interpret things the way the lawyers expect.
In any case, the key here is to become familiar with the laws and their implications and uncertainties.
* Third, learn about Tor's design.
Read the [design overview](https://2019.www.torproject.org/overview.html), the [design paper](https://www.torproject.org/svn/trunk/doc/design-paper/tor-design.html), and the [FAQ](FIXME).
Hang out on IRC (irc.oftc.net - #tor-relays) for a while and learn more.
Read the [design overview](https://2019.www.torproject.org/overview.html), the [design paper](https://www.torproject.org/svn/trunk/doc/design-paper/tor-design.html), and the [FAQ](https://2019.www.torproject.org/docs/faq.html.en).
Hang out on IRC ([irc.oftc.net](https://www.oftc.net) - #tor-relays) for a while and learn more.
If possible, attend a talk by one of the Tor developers.
Learn about the types of people and organizations who need secure communications on the Internet.
Practice explaining Tor and its benefits and consequences to friends and neighbors -- the [abuse FAQ](https://2019.www.torproject.org/faq-abuse) may provide some helpful starting points.
......@@ -46,7 +46,7 @@ Ask for advice from everybody you meet who likes the idea, and try to work your
* Sixth, teach your university's lawyers about Tor.
This may seem like a risky move, but it's way better for them to hear about Tor from you, in a relaxed environment, than to hear about it from a stranger over the phone.
Remember that lawyers don't like being told how to interpret laws by a non-lawyer, but they are often pleased to hear that other lawyers have done a lot of the research and leg-work (this is where [the EFF's legal FAQ](https://2019.www.torproject.org/eff/tor-legal-faq) comes in, along with your law school contacts if you found any).
Remember that lawyers don't like being told how to interpret laws by a non-lawyer, but they are often pleased to hear that other lawyers have done a lot of the research and leg-work (this is where [the EFF's legal FAQ](/relay/community-resources/eff-tor-legal-faq/) comes in, along with your law school contacts if you found any).
Make sure to keep these discussions informal and small -- invite one of the general counsel out to coffee to discuss "something neat that may come up later on." Feel free to bring along one of the allies you found above, if it makes you more comfortable.
Avoid having actual meetings or long email discussions, and make it clear that you don't need their official legal opinion yet.
Remember that lawyers are paid to say no unless they have a reason to say yes, so when the time finally comes to ask their opinion on running a Tor exit node, make sure the question is not "are there any liability issues?", but rather "we'd like to do this, can you help us avoid the biggest issues?" Try to predict what they will say, and try to gain allies among the lawyers who like your cause and want to help.
......@@ -64,20 +64,13 @@ You might let them know that there are ways you can dial down the potential for
You'll also want to learn if there are bandwidth limitations at your organization.
(Tor can handle a variety of rate limiting approaches, so this isn't the end of the world).
In some cases, you should talk to the network security people before you talk to the lawyers; in some cases, there will be yet other groups that will be critical to educate and bring into the discussion.
You'll have to make it up as you go.
In some cases, you should talk to the network security people before you talk to the lawyers; in some cases, there will be yet other groups that will be critical to educate and bring into the discussion. You'll have to make it up as you go.
If the authorities contact your university for logs, be pleasant and helpful.
Tor's default log level doesn't provide much that's useful, so if they want copies of your logs, that's fine.
Be helpful and take the opportunity to explain to them about Tor and why it's useful to the world.
(If they contact you directly for logs, you should send them to
your university's lawyers -- acting on it yourself is [almost always a poor idea](https://2019.www.torproject.org/eff/tor-legal-faq.html#RequestForLogs).
Be helpful and take the opportunity to explain to them about Tor and why it's useful to the world. (If they contact you directly for logs, you should send them to your university's lawyers -- acting on it yourself is [almost always a poor idea](/relay/community-resources/eff-tor-legal-faq/).
If there are too many complaints coming in, there are several approaches you can take to reduce them.
First, you should follow the tips in the [Tor relay documentation](https://community.torproject.org/relay-operations), such
as picking a descriptive hostname or getting your own IP address.
If that doesn't work, you can scale back the advertised speed of your relay, by using the Max``Advertised``Bandwidth to attract less traffic from the Tor network.
Lastly, you can scale back your exit policy.
If there are too many complaints coming in, there are several approaches you can take to reduce them. First, you should follow the tips in the [Tor relay documentation](https://community.torproject.org/relay), such as picking a descriptive hostname or getting your own IP address. If that doesn't work, you can scale back the advertised speed of your relay, by using the `MaxAdvertisedBandwidth` to attract less traffic from the Tor network. Lastly, you can scale back your exit policy.
Some people have found that their university only tolerates their Tor relay if they're involved in a research project around anonymity.
So if you're interested, you might want to get that started early in the process -- see our [Research Portal](https://research.torproject.org/).
......@@ -85,6 +78,8 @@ This approach has the added benefit that you can draw in other faculty and stude
The downside is that your Tor relay's existence is more fragile, since the terms of its demise are already negotiated.
Note that in many cases you don't even need to be researching the exit node itself -- doing research on the Tor network requires that there be a Tor network, after all, and keeping it going is a community effort.
## Mailing list
Subscribe to [Tor Relays Universities](https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays-universities) mailing list (and other education institutions too).
---
cta:
......
......@@ -27,7 +27,7 @@ Fast exit relays (>=100 Mbit/s) usually have to handle a lot more concurrent con
It is recommended that a relay have at least 16 Mbit/s (Mbps) upload bandwidth and 16 Mbit/s (Mbps) download bandwidth available for Tor. More is better.
The minimum requirements for a relay are 10 Mbit/s (Mbps).
If you have less than 10 Mbit/s but at least 1 Mbit/s we recommend you run a [bridge with obfs4 support](relay/bridge).
If you have less than 10 Mbit/s but at least 1 Mbit/s we recommend you run a [bridge with obfs4 support](relay/setup/bridge).
If you do not know your bandwidth you can use http://beta.speedtest.net to measure it.
# Monthly Outbound Traffic
......@@ -35,8 +35,8 @@ If you do not know your bandwidth you can use http://beta.speedtest.net to measu
It is required that a Tor relay be allowed to use a minimum of 100 GByte of outbound traffic (and the same amount of incoming traffic) per month.
Note: That is only about 1 day worth of traffic on a 10 Mbit/s (Mbps) connection.
More (>2 TB/month) is better and recommended.
**Ideally a relay runs on an unmetered plan** or includes 20 TB/month or more.
If you have a metered plan you might want to configure tor to only use a given amount of [bandwidth or monthly traffic](FIXME).
**Ideally a relay runs on an unmetered plan** or includes 2 TB/month or more.
If you have a metered plan you might want to configure tor to only use a given amount of [bandwidth or monthly traffic](/relay/setup/post-install/).
# Public IPv4 Address
......
......@@ -17,7 +17,7 @@ If you do not own physical hardware, you could run a relay on a rented dedicated
This can cost anywhere between $3.00/month and thousands per month, depending on your provider, hardware configuration, and bandwidth usage.
Many VPS providers will not allow you to run exit relays.
You must follow the VPS provider's terms of service, or risk having your account disabled.
For more information on hosting providers and their policies on allowing Tor relays, please see this list maintained by the Tor community: [GoodBadISPs](FIXME).
For more information on hosting providers and their policies on allowing Tor relays, please see this list maintained by the Tor community: [GoodBadISPs](/relay/community-resources/good-bad-isps).
## Questions to consider when choosing a host
......
......@@ -50,7 +50,7 @@ Because of the legal exposure that comes with running an exit relay, you should
Ideal exit relay operators are affiliated with some institution, like a university, a library, a hackerspace or a privacy related organization.
An institution can not only provide greater bandwidth for the exit, but is better positioned to handle abuse complaints or the rare law enforcement inquiry.
If you are considering running an exit relay, please read the [section on legal considerations](community-resources) for exit relay operators.
If you are considering running an exit relay, please read the [section on legal considerations](/relay/community-resources) for exit relay operators.
# Bridge
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment