tor: add more resource constraints

bitcoin-dev-project · Oct 30, 2023 · a8d1016 · a8d1016
1 parent c583cf5
commit a8d1016
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 7 deletions.
diff --git a/src/templates/torrc b/src/templates/torrc
@@ -6,18 +6,30 @@ ControlPort 9051
 CookieAuthentication 1
 CookieAuthFileGroupReadable 1
 DataDirectoryGroupReadable 1
-ORPort 9001
-ExitPolicy accept *:*
 TestingTorNetwork 1
 ClientUseIPv6 0
 ClientUseIPv4 1
 
 # Relay
 DirAuthority orport=9001 no-v2 v3ident=15E09A6BE3619593076D8324A2E1DBEEAD4539CD 100.20.15.18:9030 03E942A4F12D85B2CF7CBA4E910F321AE98EC233
 AssumeReachable 1
-PathsNeededToBuildCircuits 0.25
-TestingDirAuthVoteExit *
-TestingDirAuthVoteHSDir *
-V3AuthNIntervalsValid 2
+ExitRelay 0
+
+# Reduce resource usage
+CircuitPadding 0
+MaxMemInQueues 10 Mbytes
+BridgeRecordUsageByCountry 0
+DirReqStatistics 0
+ExtraInfoStatistics 0
+HiddenServiceStatistics 0
+OverloadStatistics 0
+PaddingStatistics 0
+# BandwidthBurst 10 Mbytes
+# BandwidthRate 10 Mbytes
+ConstrainedSockets 1
+ConstrainedSockSize 8192 Bytes
+NumEntryGuards 1
+NumDirectoryGuards 1
+UseMicrodescriptors 1
 
 # `Address <w.x.y.z>` will be added by docker_entrypoint.sh
diff --git a/src/templates/torrc.da b/src/templates/torrc.da
@@ -1,5 +1,4 @@
 # Common
-Log err file /var/log/tor/debug.log
 Log err stdout
 DataDirectory /home/debian-tor/.tor
 RunAsDaemon 0
@@ -28,4 +27,24 @@ ContactInfo [email protected]
 ORPort 9001 IPv4Only
 DirPort 9030 IPv4Only
 
+
+# Reduce resource usage
+MaxMemInQueues 64 Mbytes
+BridgeRecordUsageByCountry 0
+DirReqStatistics 0
+ExtraInfoStatistics 0
+HiddenServiceStatistics 0
+OverloadStatistics 0
+PaddingStatistics 0
+BandwidthBurst 10 Mbytes
+BandwidthRate 10 Mbytes
+ConstrainedSockets 1
+ConstrainedSockSize 8192 Bytes
+
+DoSCircuitCreationEnabled 0
+DoSCircuitCreationDefenseType 1
+
+TestingV3AuthInitialDistDelay 30 seconds
+TestingV3AuthInitialVotingInterval 60 seconds
+
 Address 100.20.15.18