#saltr (irc2p) | I2P+ 2.10.0-32+ >> i2pplus.github.io | skank.i2p | git.skank.i2p | purokishi.i2p | vituperative.github.io/i2pchat | notbob.i2p | ramble.i2p | drop.i2p | shinobi.i2p | wall.i2p | /msg an op for voice

snex i dunno if this is helpful or not but when i turn on i2p the i2p router is capped at the bandwidth setting i gave it in config despite graphs in router console saying it barely uses anything, but my network router is also being pegged too with traffic that never goes anywhere else

snex putting a cap on the network router seems to work at least as far as reported bandwidth... hopefully it doesnt keep nuking my internet

not_bob I've had no issues with bandwidth.

snex i think the hardware my isp gave me is just a piece of shit that cant handle being pegged so it keeps rebooting itself when im in this situation. so maybe i cant fix this at all while i2p is active since i can only do these controls on my bridged device not their garbage

snex we will see if i get knocked offline in about 20m lol

not_bob Lame

not_bob But, a common issue.

snex its kinda weird that the attack suddenly leaves me alone when im no longer advertised as an i2p peer

not_bob heh

not_bob Yes, that is strange.

not_bob How are you holding up?

snex i just shut my stuff off for the last couple days

snex i check it every morning to see if i can connect

nyaa2pguy ah yeah i think my isp hates this attack too, my ip has changed twice out of nowhere when it usually only changes once every few months or something lol

nyaa2pguy or it's my router

snex yes, your router is rebooting and some isps give you a new IP every time

snex mine stays relatively static

snex fuck man the avg stays where i limit it but these bursts are insane

snex its like they know i have gigabit

nyaa2pguy maybe they are targeting the fastest i2p routers more, there was that 'centrality attack' paper thing

snex could be

snex running 2 at the same time on gigabit makes me a big target lol

snex whats weird is that all this traffic never goes to the i2p machines

snex im not sure what the fuck my net router is doing with it

nyaa2pguy not_bob: How are you holding up? <- I think i got my routers/sites are mostly in "stable" positions. torrents are working but my clients are doing 1/10th the usual seeding traffic

nyaa2pguy s/are mostly/mostly

snex ohhh yeah having both routers on makes it go crazy

orignal what's up, wiggers?

snex no racism

not_bob nyaa2pguy: Doing well. Collecting a lot of data.

not_bob I've been able to torrent though all of this, but very slowly.

orignal why racism?

orignal not_bob what's up with pings?

nyaa2pguy there we go, 3rd time my ip changed during this attack, and yep, it's my isp router rebooting lol.

not_bob orignal: Someone broke something.

not_bob Not me.

not_bob dr|z3d changed something and they stopped working. He gave me a fix, but life has been busy and I have not had time to implement them.

not_bob *shakes head*

not_bob He was suprised as I was.

not_bob Anyway, I've been using a prett much undocumented way to do the pings.

nyaa2pguy i always wondered what it meant by "only responds to eephead requests" against my sites

not_bob That means that I can only get head requests and can't do real pings to the site.

not_bob It's not a flaw. Just how it sometimes works.

not_bob I have a new undocumented feature. NetDB lookups.

not_bob If nothing else works I have the network reverse the b32 to a b64. If that works, then I know the site is either alive, or has been in the last 10 or so min.

not_bob So, I then mark it as alive.

not_bob That has helepd for keeping track of sites that are otherwise totally unresponsive. No http service, no pings.

not_bob I've been doing that as a backup for a few months now. When actual pings stopped working, it went eephead/NetDB lookups.

not_bob I'll get actual pings working again, but life has been keeping me busy.

nyaa2pguy Ahh that makes sense. My web server is probably a bit unconventional compared to every other eepsite so not surprised it wouldn't be as full featured as something like nginx

not_bob Pings have to do with the tunnel setup, not the webserver.

nyaa2pguy ah, got it

not_bob For a long period of time i2pd servers didn't ping.

not_bob This has been fixed long since.

nyaa2pguy I just use the "HTTP Server Tunnels" offered by java I2P

not_bob Yes, that's best.

not_bob How wide do you make the tunnels?

nyaa2pguy I've been changing it a lot recently, I had just 1-wide + 1 backup on nyaaplus until 20 mins ago when I changed it to 3 + 2 backup. On nyaa2p and tracker.nyaa2p I'm experimenting with multihoming, so I have a mix of 1 and 3 (on different routers)

not_bob Backup is a java specific thing.

not_bob More tunnels means more relaible, to a point.

not_bob Also, multihoming is the key.

not_bob notbob.i2p is multihomed.

not_bob Which is one of the reasons why it's so reliable.

nyaa2pguy interesting, didn't know backup was java-specific. And yup, I realize multihoming lets my site continue to be accessible I screw with/restart my routers (or when 1 router is having general issues)

not_bob Yep, and it also makes you much harder to idenitfy.

nyaa2pguy that makes sense, anyone monitoring the uptime of every, or nearly every router and every site can very easily correlate downtime to get real IPs

nyaa2pguy something else I've been wondering is how a multihomed torrent client would work (I was thinking maybe snark could be modified to support multiple i2cp connections)

not_bob I don't know about that.

not_bob Multihoming is a bit strange.

not_bob You can multihome pretty much anything from what I can tell.

dr|z3d latest + build, release and dev update paths, more attack mitigations. same update on i2pplus.github.io if you're having problems reaching skank.i2p

dr|z3d note: no requirement to update java to 17+, runs fine on java8+ for now. not anticipating bumping the requirements until the next development cycle.

orignal not_bob_afk my question it why you show like no ping

dr|z3d additional mitigations and defenses in the latest build.

dr|z3d both release and dev paths have it, and github.io

dr|z3d unless explicitly enabled, we won't use 0 hop tunnels for clients. we'll also make sure we don't use the same set of peers for multiple tunnels in a pool.

dr|z3d that's to say, we avoid using the same first and last hop peers for new tunnels in the same pool.

dr|z3d it may take more time after startup to build viable tunnel pools, at least when under attack, but it's a price worth paying.

dr|z3d (all best effort)