Community analysis details HSDir flood patterns affecting ~300 Tor relays
A community report on the tor-relays mailing list presents custom metrics from approximately 300 relays, identifying 30 distinct flood windows over 48 hours. The data indicates that descriptor fetching and HTTP-wait closures dominated the traffic, with one relay recording over 14 million fetches. The report notes that Tor 0.4.9.15 is expected to rate limit some of these requests, while a separate incident report describes a relay experiencing memory exhaustion and OOM termination during a similar period.
Why it matters The detailed metrics provide specific evidence of the traffic composition during recent network-wide resource exhaustion events, helping to distinguish between different types of flood attacks and validate the effectiveness of upcoming rate-limiting measures.