Re: [tor-relays] Relays running an unsupported (EOL) Tor version

Georg Koppen:

Hello!

Relays running unsupported Tor versions is a problem we have never
really dealt with in a systematic way in the way. Some of you might
recall that we (with the help of volunteers) tried back in 2019/2020 to
get operators, running an unsupported Tor version, to upgrade[1] but
then we dropped the ball. Alas.

We just started that process again by contacting every relay operator
running an outdated Tor version (any version not 0.3.5.x or 0.4.5.x or
0.4.6.x or 0.4.7.x) by email where possible.

Just to give an update on that: We've reached out to every relay
operator affected, provided they had a valid contact info set.
Additionally, I am taking new relays with outdated versions into account
on a weekly basis, contacting those operators where possible, too. You
can follow the overall progress in our bug tracker[1] but things are
pointing into the right direction. However, there are plenty of relays
still on unsupported Tor versions. If you reading this mail are one of
their operators please upgrade your Tor version.

Tor 0.4.7 will contain a hard block of those unsupported versions at the
directory authority level[2]. But we don't want to wait until 0.4.7
stable finally gets out and directory authorities have upgraded to it.
Therefore, we plan to reject all relays which are still running
unsupported versions by *December 1 2021*. This gives more than another
month to get relays upgraded.

Georg

[1] Get an overview about relays currently running EOL Tor versions and deal with them (#56) · Issues · The Tor Project / Network Health / Team · GitLab
[2] Reject relays running Tor 0.4.2, 0.4.3, and 0.4.4 (#40480) · Issues · The Tor Project / Core / Tor · GitLab

Relays running unsupported Tor versions is a problem we have never
really dealt with in a systematic way in the way. Some of you might
recall that we (with the help of volunteers) tried back in 2019/2020 to
get operators, running an unsupported Tor version, to upgrade[1] but
then we dropped the ball. Alas. […]

   Is there any data available that sheds light on why operators run outdated versions, so the situation could be addressed not only reactively, but also in a preventive manner?

mpan

mpan:

Relays running unsupported Tor versions is a problem we have never
really dealt with in a systematic way in the way. Some of you might
recall that we (with the help of volunteers) tried back in 2019/2020 to
get operators, running an unsupported Tor version, to upgrade[1] but
then we dropped the ball. Alas. […]

Is there any data available that sheds light on why operators run
outdated versions, so the situation could be addressed not only
reactively, but also in a preventive manner?

I don't think we have e.g. any survey data or such. But from looking at
the Tor versions which relays run and after feedback from operators that
got back to us I think a really large part of this problems stems from
Linux distributions not keeping up with our releases. Ubuntu is
well-known for this issue but certainly not the only distribution worth
mentioning here.

The solution for that is our own repository for Debian-based systems and
packages made by volunteers for, say, RPM-based systems. Or, if there is
nothing of that applicable, compiling from source (which is, granted,
not the best solution, though).

Georg

···

mpan

_______________________________________________
tor-relays mailing list
tor-relays@lists.torproject.org
tor-relays Info Page