View Relay "SecretDropNL"
Fingerprint: 26AB06B0BCC3129BFFC5872B85EDB5FC30B6C67F |
Family: 1 relay
|
email:secretdropto[]protonmail.com... |
AS211507
|
Netherlands
|
Linux
- Consensus
- In Consensus (7/9 Directory Auths)
- DNS Health
- Not Tested (via exitdnshealth.1aeo.com)
- BW Verified
- 4/7 BW Auths Measured 8 Kbit/s Median
- Stability
- Not Overloaded | UP 12h 27m 49s ago
- Reachability
- IPv4: 7/9 | v6: 6/6(Directory Auths)
- BW Weight
- 0.00% of Network | 0 Kbit/s Observed By Relay
- Version
- 0.4.9.15 Recommended
Issues Detected:
-
Not getting the Fast flag
: Only 0/9 authorities vote Fast (5 needed). dannenberg, gabelmoo, moria1 and tor26 measured this relay at 8.0 Kbit/s, below the Fast threshold (816.0 Kbit/s; moria1: 8.4 Mbit/s). dizum, faravahar and longclaw used the relay-reported unknown, below the Fast threshold (816.0 Kbit/s). Its consensus weight, the median of the 4 bandwidth-scanner measurements, is 8.0 Kbit/s.
Suggestion: Fast requires a bandwidth in the top 7/8 of relays or at least AuthDirFastGuarantee (816.0 Kbit/s by default), judged by each authority. Authorities that have a bandwidth-scanner measurement of your relay judge by it, not by the bandwidth your relay reports. A low measurement means the scanners see your relay underperforming compared with other relays that report a similar speed. Clients only build circuits through Fast relays, so a relay near the threshold can gain and lose most of its traffic from one hourly consensus to the next. -
Guard: requires Fast flag
: Guard flag requires having the Fast flag first
Suggestion: Fast requires a bandwidth in the top 7/8 of relays or at least AuthDirFastGuarantee (816.0 Kbit/s by default), judged by each authority. Authorities that have a bandwidth-scanner measurement of your relay judge by it, not by the bandwidth your relay reports. -
Guard: requires Stable flag
: Guard flag requires having the Stable flag first
Suggestion: Get Stable flag by maintaining consistent uptime. Stable requires uptime and MTBF at or above network median (typically 2-3 weeks of stable running). -
Guard: bandwidth below threshold
: 0/9 authorities credit this relay with enough bandwidth for Guard (5 needed): at least 16.8 Mbit/s (AuthDirGuardBWGuarantee) or a place in their top 25% (80.0 Mbit/s – 288.0 Mbit/s). dannenberg, gabelmoo, moria1 and tor26 measured this relay at 8.0 Kbit/s. dizum, faravahar and longclaw used the relay-reported unknown.
Suggestion: Guard requires a bandwidth of at least AuthDirGuardBWGuarantee (16.8 Mbit/s by default) or one in the top 25% of relays, judged by each authority the same way as for Fast. To increase bandwidth: 1) Ensure adequate upstream capacity, 2) Check RelayBandwidthRate/RelayBandwidthBurst in torrc, 3) Monitor with Nyx. -
Guard: WFU below threshold
: 0/9 authorities meet guard-wfu (≥98%; dizum: ≥97.264%; 5 needed). dannenberg, dizum, faravahar, gabelmoo, longclaw, moria1 and tor26 measured 0.6%–5.0%.
Suggestion: WFU measures recent uptime (recent downtime weighs more heavily). To improve: 1) Minimize restarts, 2) Use systemd with Restart=always, 3) Monitor for OOM kills, 4) Schedule updates during low-traffic periods. -
Not eligible for Stable flag
: 0/9 authorities meet Stable (uptime or MTBF at or above their own median; 5 needed). dannenberg, dizum, faravahar, gabelmoo, longclaw, moria1 and tor26 do not.
Suggestion: Stable flag requires uptime/MTBF at or above network median. Keep your relay running continuously for 2-3 weeks. Avoid restarts. Use reliable hardware and network connection. -
HSDir: requires Fast flag
: HSDir flag requires having the Fast flag first
Suggestion: Fast requires a bandwidth in the top 7/8 of relays or at least AuthDirFastGuarantee (816.0 Kbit/s by default), judged by each authority. Authorities that have a bandwidth-scanner measurement of your relay judge by it, not by the bandwidth your relay reports. -
HSDir: requires Stable flag
: HSDir flag requires having the Stable flag first
Suggestion: Get Stable flag by maintaining consistent uptime. Stable requires uptime and MTBF at or above network median (typically 2-3 weeks of stable running). Avoid restarts.
Notes:
- Partial IPv4 reachability: 7/9 authorities can reach this relay
Suggestion: Some authorities cannot reach you: bastet, maatuska. This may be temporary or due to geographic routing issues.
Addresses
- OR Address
-
tor-exit1.secretdrop.to
45.141.117.244:9001
[2a14:c380:691:226f::1]:9001 - Exit Address
- 45.141.117.244
Reachability (Directory Authorities)
- IPv4
- 7/9
- IPv6
- 6/6 (1 don't test)
Location
- Country
-
Netherlands
- Interactive Map
- View in RouteFluxMap
Eligible Flags (4):
Running: 7/9 | Valid: 7/9 | V2Dir: 7/9 | Fast: 0/9 | Stable: 1/9 | HSDir: 0/9 | Guard: 0/9 | Exit: 7/9
Eligibility Flag Vote Details
| Flag | Metric | Status | Relay Value | Threshold Required |
|---|---|---|---|---|
| Running | IPv4 Reachability | Meets (7/9 DA) | 7/9 authorities reached relay | ≥5/9 DA ORPort reachable |
| IPv6 Reachability | Meets (6/6 DA) | 6/6 tested authorities reached relay | ≥4/6 tested (majority) (≥4/6 DA) | |
| Valid | Descriptor | Meets (7/9 DA) | 7/9 authorities assigned Valid | Not blacklisted + valid descriptor (≥5/9 DA) |
| V2Dir | DirPort Available | Meets (7/9 DA) | Tunnelled: Yes (no DirPort) (R) | Tunnelled directory via ORPort or DirPort (≥5/9 DA) |
| Fast | Speed | Below (0/9 DA) | 8.0 Kbit/s (4 DA measured) 0 bit/s (3 DA relay-reported) |
≥816.0 Kbit/s (AuthDirFastGuarantee, or the top-7/8 cutoff if lower) (≥5/9 DA) [Stricter] moria1: ≥8.4 Mbit/s |
| Stable | MTBF | Below (0/9 DA) | Median: 0.5d (1/9 DA above threshold) Min/Max: 0.5d / 14.0d (7/9 DA, Voting / Total Eligible) |
≥2.5d - 8.5d (varies) (≥5/9 DA) [Stricter] moria1: ≥8467.5d |
| Uptime | Below (0/9 DA) | 0.5d (R) | ≥3.2d - 4.0d (varies) (≥5/9 DA) | |
| HSDir | Prereq: Fast | Below (0/9 DA) | 0/9 DA assigned Fast 8.0 Kbit/s (4 DA measured) 0 bit/s (3 DA relay-reported) |
≥816.0 Kbit/s (AuthDirFastGuarantee, or the top-7/8 cutoff if lower) (≥5/9 DA) [Stricter] moria1: ≥8.4 Mbit/s |
| Prereq: Stable | Below (1/9 DA) | 1/9 DA assigned Stable | ≥2.5d - 8.5d (varies) (≥5/9 DA) [Stricter] moria1: ≥8467.5d |
|
| Prereq: V2Dir | Meets (7/9 DA) | 7/9 DA assigned V2Dir | Tunnelled directory via ORPort or DirPort (≥5/9 DA) | |
| Uptime | Below (0/9 DA) | 0.5d (R) | ≥96h as each authority sees it (MinUptimeHidServDirectoryV2) (≥5/9 DA) [Stricter] moria1: ≥98% WFU and ≥9.9d Time Known |
|
| Guard | Prereq: Fast | Below (0/9 DA) | 0/9 DA assigned Fast 8.0 Kbit/s (4 DA measured) 0 bit/s (3 DA relay-reported) |
≥816.0 Kbit/s (AuthDirFastGuarantee, or the top-7/8 cutoff if lower) (≥5/9 DA) [Stricter] moria1: ≥8.4 Mbit/s |
| Prereq: Stable | Below (1/9 DA) | 1/9 DA assigned Stable | ≥2.5d - 8.5d (varies) (≥5/9 DA) [Stricter] moria1: ≥8467.5d |
|
| Prereq: V2Dir | Meets (7/9 DA) | 7/9 DA assigned V2Dir | Tunnelled directory via ORPort or DirPort (≥5/9 DA) | |
| WFU | Below (0/9 DA) | Median: 0.6% (0/9 DA above threshold) Min/Max: 0.6% / 5.0% (7/9 DA, Voting / Total Eligible) |
≥98%; dizum: ≥97.264% (≥5/9 DA) | |
| Time Known | Partial (7/9 DA) | Median: 82.1d (7/9 DA above threshold) Min/Max: 9.9d / 82.1d (7/9 DA, Voting / Total Eligible) |
≥8 days (≥5/9 DA) | |
| Bandwidth | Below (0/9 DA) | 8.0 Kbit/s (4 DA measured) 0 bit/s (3 DA relay-reported) |
≥16.8 Mbit/s (AuthDirGuardBWGuarantee) OR top 25% (≥80.0 Mbit/s-288.0 Mbit/s) (≥5/9 DA) | |
| Exit | Exit Policy | Meets (7/9 DA) | Port 80: Yes | Port 443: Yes (R) | Allows ≥1 /8 on ports 80 AND 443 (≥5/9 DA) |
(DA) = Dir. Auth. Measured |
(R) = Relay Reported
Data from Tor CollecTor (authority votes, fetched 2026-11-02 07:45:06).
Capacity (Relay Reported)
- Observed Bandwidth
- 0.00 Kbit/s
- Advertised Bandwidth
- Unknown
- Rate Limit
- 8.59 Gbit/s
- Burst Limit
- 8.59 Gbit/s
- Total Data
-
86 TB
(6 months)
1mo: 24 TB | 6mo: 86 TB
Measurement (Directory Authority Verified)
Source: CollecTor — fetched 2026-11-02 07:45:06
- Measured By
-
4/7
Bandwidth Authorities
Not measured by: bastet, faravahar, longclaw - Consensus Weight
- 8.0 Kbit/s (median of 4 measurements)
- Measured Min / Max
- 8.0 Kbit/s / 8.0 Kbit/s
Network Participation:
Consensus Weight:
0.0000% of network
(0th pctl)
|
Guard:
N/A |
Middle:
N/A |
Exit:
0.0000% (0th pctl)
History
Uptime Metrics
- Current Status
- UP 12h 27m 49s ago
- Overall Uptime (1M/6M/1Y/5Y)
- 0.0%/0.0%/0.0%/0.0%
- Flag Uptime (1M/6M/1Y/5Y)
- Matches Overall Uptime (0.0%/0.0%/0.0%/0.0%)
- Hibernating
- No
Timestamps
- First Seen
- 10h 45m 28s ago (2026-11-01 21:00:00)
- Last Seen
- 1h 45m 28s ago (2026-11-02 06:00:00)
- Last Restarted
- 12h 27m 49s ago (2026-11-01 19:17:39)
- Last Changed Address
- 2026-11-01 21:00:00
Overload Status:
Not Overloaded — No overload conditions reported.
Evaluated 2026-11-02 07:45 UTC. /details snapshot 2026-11-02 06:00:00 UTC (cached 24s ago). /bandwidth snapshot 2026-11-02 05:00:00 UTC (cached 1h 30m ago).
General Overload (from /details)
- Status
- No general overload report in available data
File Descriptor Exhaustion (from /bandwidth)
- Status
- No file-descriptor exhaustion report in available data
Rate Limits (from /bandwidth)
- Status
- No rate-limit report in available data
- Rate Limit
- —
- Burst Limit
- —
- Write counter
- —
- Read counter
- —
About these reports and MetricsPort
Allium’s eligibility windows are applied to the reported timestamps: 72 hours for general overload and file-descriptor exhaustion, 24 hours for a rate-limit hit. A report at the cutoff is historical. An older report can remain visible after Onionoo or Allium’s cache still has it. The cutoff does not prove the relay recovered at that moment. Allium caches the bandwidth document for 12 hours by default. The snapshot time is when Onionoo published that document. It is not the relay’s event time, and it is not necessarily the extra-info publication time. Cache age is how old Allium’s copy is.
MetricsPort counters are cumulative. Compare samples, and account for process restarts. A nonzero total alone does not show ongoing activity. Gauges describe current values. An unavailable metric is unknown, not zero. Allium does not have this relay’s MetricsPort readings and does not invent them.
The port below is an example for an endpoint you have already configured. MetricsPort must be enabled with restricted access and must not be exposed publicly. Setup stays in the Tor overload troubleshooting guide.
curl http://127.0.0.1:9035/metrics
History
Operator Identity
Source: AROI Validation API — 2026-11-01 22:00 UTC
- AROI Domain (?)
- Not specified
- Operator Validation
- Unvalidated
- This Relay
- N/A (no AROI configured)
- Contact
- email:secretdropto[]protonmail.com ciissversion:2
Family Configuration
- Family Support
- None — No family membership configured
Happy Families (family-cert)
- Effective Members: 0
- none
MyFamily (legacy declarations)
- Effective Member: 1
26AB06B0BCC3129BFFC5872B85EDB5FC30B6C67F (this relay)
- Alleged Members: 0
- none
- Indirect Members: 0
- none
IPv4 Exit Policy Summary
accept: 20-23 43 53 79-81 88 110 143 194 220 389 443 464 531 543-544 554 563 636 706 749 873 902-904 981 989-995 1194 1220 1293 1500 1533 1677 1723 1755 1863 2082-2083 2086-2087 2095-2096 2102-2104 3128 3389 3690 4321 4643 5050 5190 5222-5223 5228 5900 6660-6669 6679 6697 8000 8008 8074 8080 8082 8087-8088 8232-8233 8332-8333 8443 8888 9418 9999-10000 11371 18080-18081 18089 19294 19638 50002 64738
IPv6 Exit Policy Summary
accept: 20-23 43 53 79-81 88 110 143 194 220 389 443 464 531 543-544 554 563 636 706 749 873 902-904 981 989-995 1194 1220 1293 1500 1533 1677 1723 1755 1863 2082-2083 2086-2087 2095-2096 2102-2104 3128 3389 3690 4321 4643 5050 5190 5222-5223 5228 5900 6660-6669 6679 6697 8000 8008 8074 8080 8082 8087-8088 8232-8233 8332-8333 8443 8888 9418 9999-10000 11371 18080-18081 18089 19294 19638 50002 64738
Full Exit Policy
reject 0.0.0.0/8:* reject 169.254.0.0/16:* reject 127.0.0.0/8:* reject 192.168.0.0/16:* reject 10.0.0.0/8:* reject 172.16.0.0/12:* reject 45.141.117.244:* accept *:20-23 accept *:43 accept *:53 accept *:79-81 accept *:88 accept *:110 accept *:143 accept *:194 accept *:220 accept *:389 accept *:443 accept *:464 accept *:531 accept *:543-544 accept *:554 accept *:563 accept *:636 accept *:706 accept *:749 accept *:873 accept *:902-904 accept *:981 accept *:989-995 accept *:1194 accept *:1220 accept *:1293 accept *:1500 accept *:1533 accept *:1677 accept *:1723 accept *:1755 accept *:1863 accept *:2082-2083 accept *:2086-2087 accept *:2095-2096 accept *:2102-2104 accept *:3128 accept *:3389 accept *:3690 accept *:4321 accept *:4643 accept *:5050 accept *:5190 accept *:5222-5223 accept *:5228 accept *:5900 accept *:6660-6669 accept *:6679 accept *:6697 accept *:8000 accept *:8008 accept *:8074 accept *:8080 accept *:8082 accept *:8087-8088 accept *:8232-8233 accept *:8332-8333 accept *:8443 accept *:8888 accept *:9418 accept *:9999 accept *:10000 accept *:11371 accept *:18080-18081 accept *:18089 accept *:19294 accept *:19638 accept *:50002 accept *:64738 reject *:*
Last fetch was at Mon, 02 Nov 2026 07:45:27 GMT.
Data from Tor CollecTor (authority votes, fetched 2026-11-02 07:45:06).
Each cell shows: your measured value | authority threshold. Green = meets, red = below. Flags: green = all authorities agree, yellow = partial.
| Authority | Running | Valid | Exit | MiddleOnly | BW Scan (Authority) |
v4 | v6 | Flags | Fast (BW|T) | Guard BW (BW|Threshold) | Guard WFU (M|T) | Guard TK (M|T) | Stable MTBF (M|T) | Stable Uptime (Relay|T) | Desc Published | Cons Wt (Authority) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| bastet (US) | No | — | — | — | Y | No | — | — | — | — | — | — | — | — | — | — |
| dannenberg (DE) | Yes | Yes | Yes | — | Y | Yes | Yes | Running, Valid, V2Dir, Exit | 8.0 Kbit/s (M) | 816.0 Kbit/s | 8.0 Kbit/s (M) | 288.0 Mbit/s OR 16.8 Mbit/s | 0.6% | 98% | 82.0d | 8d | 0.5d | 8.5d | 0.5d | 4.0d | 2026-11-01 19:17:41 | 8.0 Kbit/s (M) |
| dizum (NL) | Yes | Yes | Yes | — | N | Yes | Yes | Running, Valid, V2Dir, Exit | 0 bit/s (R) | 816.0 Kbit/s | 0 bit/s (R) | 80.0 Mbit/s OR 16.8 Mbit/s | 0.6% | 97% | 81.9d | 8d | 0.5d | 5.9d | 0.5d | 4.0d | 2026-11-01 19:17:41 | — |
| faravahar (US) | Yes | Yes | Yes | — | Y | Yes | Yes | Running, Valid, V2Dir, Exit | 0 bit/s (R) | 816.0 Kbit/s | 0 bit/s (R) | 80.0 Mbit/s OR 16.8 Mbit/s | 0.6% | 98% | 82.1d | 8d | 0.5d | 5.9d | 0.5d | 4.0d | 2026-11-01 19:17:41 | — |
| gabelmoo (DE) | Yes | Yes | Yes | — | Y | Yes | Yes | Running, Valid, V2Dir, Exit | 8.0 Kbit/s (M) | 816.0 Kbit/s | 8.0 Kbit/s (M) | 264.0 Mbit/s OR 16.8 Mbit/s | 0.6% | 98% | 82.1d | 8d | 0.5d | 9.8d | 0.5d | 4.0d | 2026-11-01 19:17:41 | 8.0 Kbit/s (M) |
| longclaw (US) | Yes | Yes | Yes | — | Y | Yes | N/T | Running, Valid, V2Dir, Exit | 0 bit/s (R) | 816.0 Kbit/s | 0 bit/s (R) | 80.0 Mbit/s OR 16.8 Mbit/s | 0.6% | 98% | 82.1d | 8d | 0.5d | 9.9d | 0.5d | 4.0d | 2026-11-01 19:17:41 | — |
| maatuska (SE) | No | — | — | — | N | No | — | — | — | — | — | — | — | — | — | — |
| moria1 (US) | Yes | Yes | Yes | — | Y | Yes | Yes | Running, Valid, V2Dir, Stable, Exit | 8.0 Kbit/s (M) | 8.4 Mbit/s | 8.0 Kbit/s (M) | 192.0 Mbit/s OR 16.8 Mbit/s | 5.0% | 98% | 9.9d | 8d | 14.0d | 8467.5d | 0.5d | 4.0d | 2026-11-01 19:17:41 | 8.0 Kbit/s (M) |
| tor26 (AT) | Yes | Yes | Yes | — | Y | Yes | Yes | Running, Valid, V2Dir, Exit | 8.0 Kbit/s (M) | 816.0 Kbit/s | 8.0 Kbit/s (M) | 264.0 Mbit/s OR 16.8 Mbit/s | 0.6% | 98% | 82.1d | 8d | 0.5d | 9.8d | 0.5d | 4.0d | 2026-11-01 19:17:41 | 8.0 Kbit/s (M) |
N/T = this authority does not test IPv6 • — = not in this vote • Format: relay value | authority threshold • WFU = Weighted Fractional Uptime • TK = Time Known • Bandwidth source: (M) bandwidth-scanner measurement, (R) relay-reported, (U) unmeasured, counted as 0
Bandwidth Values Explained:
Measured (M) = An authority's bandwidth-scanner measurement of your relay (
Relay-reported (R) = The bandwidth your relay advertises: the lower of its observed bandwidth and its rate limit, capped at 10 MB/s (
Not published = The authority has no measurement of your relay in its vote and ignores relay-reported bandwidth, yet it voted Fast or its vote has no measurements at all: it judges your relay by a measurement kept from an earlier bandwidth file (0 if none), which its vote doesn't show.
Why different? A low measurement means the bandwidth scanners see your relay underperforming compared with other relays that report a similar speed. Votes list both values in kilobytes per second. Rules: Assigning flags in a vote, Computing a consensus.
Measured (M) = An authority's bandwidth-scanner measurement of your relay (
Measured= in its vote). An authority that has one uses it for the Fast and Guard flags, and the consensus weight is the median of these measurements when 3 or more authorities have one.Relay-reported (R) = The bandwidth your relay advertises: the lower of its observed bandwidth and its rate limit, capped at 10 MB/s (
Bandwidth= in every vote). An authority without a measurement uses it for flags, unless it has measurements for enough other relays (ignoring-advertised-bws=1); then your relay counts as 0 (U). It sets the consensus weight only when fewer than 3 authorities measured the relay, capped at 20 KB/s (maxunmeasuredbw) while 3 or more authorities publish measurements.Not published = The authority has no measurement of your relay in its vote and ignores relay-reported bandwidth, yet it voted Fast or its vote has no measurements at all: it judges your relay by a measurement kept from an earlier bandwidth file (0 if none), which its vote doesn't show.
Why different? A low measurement means the bandwidth scanners see your relay underperforming compared with other relays that report a similar speed. Votes list both values in kilobytes per second. Rules: Assigning flags in a vote, Computing a consensus.
Stable Uptime (Two Data Sources):
Relay Uptime = From Onionoo API (last_restarted field). Self-reported uptime from descriptor. Same value for all authorities.
Authority Threshold = From CollecTor vote files (flag-thresholds stable-uptime). Each authority may have different thresholds.
Why two sources? Vote files contain authority thresholds but not per-relay uptime values. Onionoo aggregates relay descriptors which include uptime.
Relay Uptime = From Onionoo API (last_restarted field). Self-reported uptime from descriptor. Same value for all authorities.
Authority Threshold = From CollecTor vote files (flag-thresholds stable-uptime). Each authority may have different thresholds.
Why two sources? Vote files contain authority thresholds but not per-relay uptime values. Onionoo aggregates relay descriptors which include uptime.