Ar chuardach sealaíochta taispeánaimid ponc ómra in aice leis an leasainm sealaíochta nuair a bhíonn sé ró-ualaithe.
Ciallaíonn sé seo gur tionscnaíodh ceann amháin nó go leor de na méadrachtaí ualaigh seo a leanas:
Tabhair faoi deara, má shroicheann sealaíocht staid ró-ualaithe, taispeánaimid é ar feadh 72 uair tar éis don athsheachadán teacht chucu féin.
Má thugann tú faoi deara go bhfuil do chuid sealaíochta ró-ualaithe, le do thoil:
Seiceáil https://status.torproject.org/ le haghaidh aon saincheisteanna aitheanta sa chatagóir "líonra Tor".
Smaoinigh ar sysctl a thiúnadh do do chóras le haghaidh líonra, cuimhne agus ualach LAP.
Smaoinigh ar MetricsPort a chumasú le tuiscint a fháil ar cad atá ag tarlú.
Tiúnadh sysctl le haghaidh líonra, cuimhne agus ualach LAP
ídithe port TCP
Má tá tú ag fulaingt ídithe calafoirt TCP smaoineamh ar leathnú do raon calafort áitiúil.
Is féidir leat é sin a dhéanamh le
# sysctl -w net.ipv4.ip_local_port_range="15000 64000"
nó
# echo 15000 64000 > /proc/sys/net/ipv4/ip_local_port_range
Coinnigh i gcuimhne nach bhfuil tiúnadh sysctl mar a thuairiscítear buan agus caillfear é nuair a atosófar é.
Ní mór duit an chumraíocht a chur le /etc/sysctl.conf nó le comhad i /etc/sysctl.d/ chun é a dhéanamh buan.
MetricsPort
Chun folláine athsheachadáin Tor agus líonra Tor a thuiscint, tá sé ríthábhachtach méadracht sealaíochta a sholáthar agus rochtain a bheith agat.
Tá faisnéis ró-ualaithe sealaíochta curtha le tuairisceoirí sealaíochta ó 0.4.6+ ach ní raibh go dtí Tor >= 0.4.7.1-alfa go raibh comhéadan ar fáil don bhun-mhéadracht sealaíochta: an calafort méadrachta.
MetricsPort á chumasú
Soláthraíonn Tor rochtain ar an bport méadrachta trí rogha cumraíochta torrc ar a dtugtar MetricsPort.
Tá sé tábhachtach a thuiscint go bhfuil an tor MetricsPort á nochtadh go poiblí contúirteach d'úsáideoirí líonra Tor, agus is é sin an fáth nach bhfuil an calafort sin cumasaithe de réir réamhshocraithe agus go gcaithfidh beartas rochtana a rochtain a rialú.
Bí an-chúramach agus an-chúramach agus an calafort seo á oscailt agat, agus dún é nuair a bhíonn dífhabhtaithe déanta agat.
Glacaimid leis gurb tusa an t-aon úsáideoir ar fhreastalaí a ritheann sealaíocht Tor.
Is féidir leat an port méadrachta a chumasú lena chur le do chomhad torrc:
MetricsPort 127.0.0.1:9035
MetricsPortPolicy accept 127.0.0.1
Agus ansin beidh tú in ann na méadrachtaí a aisghabháil go héasca le:
# curl https://127.0.0.1:9035/metrics
atá de réir réamhshocraithe i bhformáid Prometheus.
Tabhair faoi deara: beidh gach úsáideoir ar an bhfreastalaí sin in ann rochtain a fháil ar na méadrachtaí sealaíochta sin sa sampla thuas.
Go ginearálta, socraigh polasaí rochtana an-dian le MetricsPortPolicy agus smaoinigh ar ghnéithe balla dóiteáin do chórais oibriúcháin a úsáid mar chosaint dhomhain.
Le haghaidh míniú níos mionsonraithe ar MetricsPort agus MetricsPortPolicy féach leathanach fear Thor.
Aschur MetricsPort
Seo sampla de cad a tháirgfidh aschur cumasaithe MetricsPort (fágamar ar lár aon mhéadracht a bhain le rialú ar phlódú mar ní mór dúinn fós an comhéadan sin a chobhsú):
# HELP tor_relay_connections Total number of opened connections
# TYPE tor_relay_connections gauge
tor_relay_connections{type="OR listener",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="OR listener",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="OR listener",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="OR listener",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="OR",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="OR",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="OR",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="OR",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Exit",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Exit",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Exit",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Exit",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Socks listener",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Socks listener",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Socks listener",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Socks listener",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Socks",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Socks",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Socks",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Socks",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Directory listener",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Directory listener",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Directory listener",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Directory listener",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Directory",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Directory",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Directory",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Directory",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Control listener",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Control listener",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Control listener",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Control listener",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Control",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Control",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Control",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Control",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Transparent pf/netfilter listener",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Transparent pf/netfilter listener",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Transparent pf/netfilter listener",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Transparent pf/netfilter listener",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Transparent natd listener",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Transparent natd listener",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Transparent natd listener",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Transparent natd listener",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="DNS listener",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="DNS listener",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="DNS listener",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="DNS listener",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Extended OR",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Extended OR",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Extended OR",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Extended OR",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Extended OR listener",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Extended OR listener",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Extended OR listener",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Extended OR listener",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="HTTP tunnel listener",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="HTTP tunnel listener",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="HTTP tunnel listener",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="HTTP tunnel listener",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Metrics listener",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Metrics listener",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Metrics listener",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Metrics listener",direction="received",state="opened",family="ipv6"} 0
tor_relay_connections{type="Metrics",direction="initiated",state="opened",family="ipv4"} 0
tor_relay_connections{type="Metrics",direction="initiated",state="opened",family="ipv6"} 0
tor_relay_connections{type="Metrics",direction="received",state="opened",family="ipv4"} 0
tor_relay_connections{type="Metrics",direction="received",state="opened",family="ipv6"} 0
# HELP tor_relay_connections_total Total number of created/rejected connections
# TYPE tor_relay_connections_total counter
tor_relay_connections_total{type="OR listener",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="OR listener",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="OR listener",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="OR listener",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="OR listener",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="OR listener",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="OR",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="OR",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="OR",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="OR",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="OR",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="OR",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Exit",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Exit",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Exit",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Exit",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Exit",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Exit",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Socks listener",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Socks listener",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Socks listener",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Socks listener",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Socks listener",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Socks listener",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Socks",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Socks",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Socks",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Socks",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Socks",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Socks",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Directory listener",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Directory listener",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Directory listener",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Directory listener",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Directory listener",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Directory listener",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Directory",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Directory",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Directory",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Directory",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Directory",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Directory",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Control listener",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Control listener",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Control listener",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Control listener",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Control listener",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Control listener",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Control",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Control",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Control",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Control",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Control",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Control",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Transparent pf/netfilter listener",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Transparent pf/netfilter listener",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Transparent pf/netfilter listener",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Transparent pf/netfilter listener",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Transparent pf/netfilter listener",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Transparent pf/netfilter listener",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Transparent natd listener",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Transparent natd listener",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Transparent natd listener",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Transparent natd listener",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Transparent natd listener",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Transparent natd listener",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="DNS listener",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="DNS listener",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="DNS listener",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="DNS listener",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="DNS listener",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="DNS listener",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Extended OR",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Extended OR",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Extended OR",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Extended OR",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Extended OR",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Extended OR",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Extended OR listener",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Extended OR listener",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Extended OR listener",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Extended OR listener",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Extended OR listener",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Extended OR listener",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="HTTP tunnel listener",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="HTTP tunnel listener",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="HTTP tunnel listener",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="HTTP tunnel listener",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="HTTP tunnel listener",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="HTTP tunnel listener",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Metrics listener",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Metrics listener",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Metrics listener",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Metrics listener",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Metrics listener",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Metrics listener",direction="received",state="rejected",family="ipv6"} 0
tor_relay_connections_total{type="Metrics",direction="initiated",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Metrics",direction="initiated",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Metrics",direction="received",state="created",family="ipv4"} 0
tor_relay_connections_total{type="Metrics",direction="received",state="created",family="ipv6"} 0
tor_relay_connections_total{type="Metrics",direction="received",state="rejected",family="ipv4"} 0
tor_relay_connections_total{type="Metrics",direction="received",state="rejected",family="ipv6"} 0
# HELP tor_relay_flag Relay flags from consensus
# TYPE tor_relay_flag gauge
tor_relay_flag{type="Fast"} 0
tor_relay_flag{type="Exit"} 0
tor_relay_flag{type="Authority"} 0
tor_relay_flag{type="Stable"} 0
tor_relay_flag{type="HSDir"} 0
tor_relay_flag{type="Running"} 0
tor_relay_flag{type="V2Dir"} 0
tor_relay_flag{type="Sybil"} 0
tor_relay_flag{type="Guard"} 0
# HELP tor_relay_circuits_total Total number of circuits
# TYPE tor_relay_circuits_total gauge
tor_relay_circuits_total{state="opened"} 0
# HELP tor_relay_streams_total Total number of streams
# TYPE tor_relay_streams_total counter
tor_relay_streams_total{type="BEGIN"} 0
tor_relay_streams_total{type="BEGIN_DIR"} 0
tor_relay_streams_total{type="RESOLVE"} 0
# HELP tor_relay_traffic_bytes Traffic related counters
# TYPE tor_relay_traffic_bytes counter
tor_relay_traffic_bytes{direction="read"} 0
tor_relay_traffic_bytes{direction="written"} 0
# HELP tor_relay_dos_total Denial of Service defenses related counters
# TYPE tor_relay_dos_total counter
tor_relay_dos_total{type="circuit_rejected"} 0
tor_relay_dos_total{type="circuit_killed_max_cell"} 0
tor_relay_dos_total{type="circuit_killed_max_cell_outq"} 0
tor_relay_dos_total{type="marked_address"} 0
tor_relay_dos_total{type="marked_address_maxq"} 0
tor_relay_dos_total{type="conn_rejected"} 0
tor_relay_dos_total{type="concurrent_conn_rejected"} 0
tor_relay_dos_total{type="single_hop_refused"} 0
tor_relay_dos_total{type="introduce2_rejected"} 0
# HELP tor_relay_load_onionskins_total Total number of onionskins handled
# TYPE tor_relay_load_onionskins_total counter
tor_relay_load_onionskins_total{type="tap",action="processed"} 0
tor_relay_load_onionskins_total{type="tap",action="dropped"} 0
tor_relay_load_onionskins_total{type="fast",action="processed"} 0
tor_relay_load_onionskins_total{type="fast",action="dropped"} 0
tor_relay_load_onionskins_total{type="ntor",action="processed"} 0
tor_relay_load_onionskins_total{type="ntor",action="dropped"} 0
tor_relay_load_onionskins_total{type="ntor_v3",action="processed"} 0
tor_relay_load_onionskins_total{type="ntor_v3",action="dropped"} 0
# HELP tor_relay_exit_dns_query_total Total number of DNS queries done by this relay
# TYPE tor_relay_exit_dns_query_total counter
tor_relay_exit_dns_query_total 0
# HELP tor_relay_exit_dns_error_total Total number of DNS errors encountered by this relay
# TYPE tor_relay_exit_dns_error_total counter
tor_relay_exit_dns_error_total{reason="success"} 0
tor_relay_exit_dns_error_total{reason="format"} 0
tor_relay_exit_dns_error_total{reason="serverfailed"} 0
tor_relay_exit_dns_error_total{reason="notexist"} 0
tor_relay_exit_dns_error_total{reason="notimpl"} 0
tor_relay_exit_dns_error_total{reason="refused"} 0
tor_relay_exit_dns_error_total{reason="truncated"} 0
tor_relay_exit_dns_error_total{reason="unknown"} 0
tor_relay_exit_dns_error_total{reason="tor_timeout"} 0
tor_relay_exit_dns_error_total{reason="shutdown"} 0
tor_relay_exit_dns_error_total{reason="cancel"} 0
tor_relay_exit_dns_error_total{reason="nodata"} 0
# HELP tor_relay_load_oom_bytes_total Total number of bytes the OOM has freed by subsystem
# TYPE tor_relay_load_oom_bytes_total counter
tor_relay_load_oom_bytes_total{subsys="cell"} 0
tor_relay_load_oom_bytes_total{subsys="dns"} 0
tor_relay_load_oom_bytes_total{subsys="geoip"} 0
tor_relay_load_oom_bytes_total{subsys="hsdir"} 0
# HELP tor_relay_load_socket_total Total number of sockets
# TYPE tor_relay_load_socket_total gauge
tor_relay_load_socket_total{state="opened"} 0
tor_relay_load_socket_total 0
# HELP tor_relay_load_tcp_exhaustion_total Total number of times we ran out of TCP ports
# TYPE tor_relay_load_tcp_exhaustion_total counter
tor_relay_load_tcp_exhaustion_total 0
# HELP tor_relay_load_global_rate_limit_reached_total Total number of global connection bucket limit reached
# TYPE tor_relay_load_global_rate_limit_reached_total counter
tor_relay_load_global_rate_limit_reached_total{side="read"} 0
tor_relay_load_global_rate_limit_reached_total{side="write"} 0
Faighimis amach cad is brí le cuid de na línte seo i ndáiríre:
tor_relay_load_onionskins_total{type="ntor",action="dropped"} 0
Nuair a thosaíonn sealaíochta “titithe” á fheiceáil, is fadhb LAP/RAM de ghnáth é.
Faraor tá except singil ag Tor ach amháin nuair a phróiseáiltear na "craicne oinniúin".
Is iad na "craicne oinniún" an obair chripteagrafach is gá a dhéanamh ar na "sraitheanna oinniún" cáiliúla i ngach ciorcad.
Nuair a phróiseálann tor na sraitheanna bainimid úsáid as comhthiomsú snáithe agus déanaimid an obair sin go léir a fhoinsiú allamuigh chuig an linn sin.
D’fhéadfadh sé tarlú go dtosóidh an linn seo ag ísliú oibre de bharr cuimhne nó brú LAP agus spreagfaidh sé seo staid ró-ualaithe.
Má tá do fhreastalaí ag rith ag lánacmhainneacht is dócha go spreagfar é seo.
tor_relay_exit_dns_error_total{...}
Léiríonn cuntar ar bith sa réimse "* _dns_error_total" (seachas an ceann le haghaidh fiosruithe rathúla) fadhb fhéideartha a bhaineann le DNS.
Mar sin féin, thuig muid le linn timthriall scaoileadh 0.4.7 go bhfuil earráidí DNS i bhfad ró-fhuaimneach agus go bhfuil an iomarca dearfacha bréagacha iontu le bheith úsáideach chun críocha tuairiscithe ró-ualaithe.
Dá bhrí sin ní úsáidimid iad chun na críche sin ag tosú le 0.4.6.9 agus 0.4.7.4-alfa. Mar sin féin, coinnímid méadracht DNS fós chun léargas a thabhairt don oibreoir sealaíochta ar a bhfuil ar siúl lena sealaíochta.
Ní bhaineann ceisteanna agus earráidí am istigh DNS ach le nóid Scoir.
tor_relay_load_oom_bytes_total{...}
Léiríonn agairt As-Chuimhne fadhb RAM.
Seans go mbeidh níos mó RAM de dhíth ar an sealaíochta nó go bhfuil cuimhne ag sceitheadh.
Má thug tú faoi deara go bhfuil an próiseas Tor ag sceitheadh cuimhne, le do thoil tuairiscigh an cheist trí Tor gitLab nó trí ríomhphost a sheoladh chuig an liosta seoltaí tor.
Tá a láimhseálaí OOM féin ag Tor agus déantar é a agairt nuair a shroichtear 75% den chuimhne iomlán a cheapann Tor atá ar fáil.
Mar sin, abair linn go gceapann Tor gur féidir leis 2GB a úsáid san iomlán agus ansin ag 1.5GB d’úsáid chuimhne, tosóidh sé ar chuimhne a shaoradh.
Meastar gur stát ró-ualaithe é sin.
Chun an méid cuimhne atá ar fáil aige a mheas, nuair a thosaíonn Tor, úsáidfidh sé MaxMemInQueues nó, mura bhfuil sé socraithe, féachfaidh sé ar an RAM iomlán atá ar fáil ar an gcóras agus cuirfidh sé an t-algartam seo i bhfeidhm:
if RAM >= 8GB {
memory = RAM * 40%
} else {
memory = RAM * 75%
}
/* Capped. */
memory = min(memory, 8GB) -> [8GB on 64bit and 2GB on 32bit)
/* Minimum value. */
memory = max(250MB, memory)
Chun staid ró-ualaithe a sheachaint molaimid athsheachadán a rith os cionn 2GB RAM ar 64 giotán.
Moltar 4GB, cé ar ndóigh ní ghortaíonn sé níos mó RAM a chur leis más féidir leat.
Nóta: Má tá freastalaí cumhachtach á rith agat le go leor RAM, seans go mbeidh tú i riocht ró-ualaithe mar gheall ar an teorainn réamhshocraithe méide scuaine de 8GB cé go bhfuil neart RAM fós agat gan úsáid. Cuir iontráil chuí MaxMemInQueues le do chumraíocht torrc sa chás sin.
D'fhéadfadh duine a thabhairt faoi deara go bhféadfadh láimhseálaí OS OOM féin glaoch a chur ar tor.
Toisc go dtógann tor an chuimhne iomlán ar an gcóras nuair a thosaíonn sé, má tá go leor feidhmchláir eile ag baint úsáide as RAM ag an gcóras iomlán, itheann sé an iomarca cuimhne.
Sa chás seo d'fhéadfadh an OS OOM tor, gan tor fiú faoi deara brú cuimhne.
tor_relay_load_socket_total
Má tá líon na soicéid oscailte gar do nó mar a chéile le líon iomlán na soicéid atá ar fáil, léiríonn sé seo go bhfuil an sealaíocht ag rith as na soicéid.
Is é an réiteach ná ulimit -n a mhéadú don phróiseas tor.
tor_relay_load_tcp_exhaustion_total
Léiríonn na línte seo go bhfuil an sealaíocht ag rith amach as calafoirt TCP.
Déan iarracht sysctl a thiúnadh mar cur síos air thuas.
tor_relay_load_global_rate_limit_reached_total
Má mhéadaítear an cuntar seo faoi luach suntasach éigin thar thréimhse ghearr ama, bíonn plódaithe ar an gcuntar.
Is dócha go bhfuil sé á úsáid mar Gharda ag seirbhís mhór oinniúin nó le haghaidh DDoS leanúnach ar an líonra.
Má tá do chuid sealaíochta ró-ualaithe fós agus mura bhfuil a fhios agat cén fáth, téigh i dteagmháil le do thoil le [email protected].
Is féidir leat do ríomhphost a chriptiú le eochair OpenPGP tuarascáil líonra.