Tor Tuneup

Windows: RWIN: TCPOptimize max setting Window Scaling: On TcpIP TTL: 80 LANBufferSize 65535 DNS Cache: 4 hours (set in registry by hand) (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters)) MTU: 1500 Privoxy: Privoxy buffer: 8 Process set to high forwarded-connect-retries

3

Firefox: Firefox Disk Cache: disabled Firefox memory cache: 32768k Firefox connections: 64 Firefox pipelining: 64 Firefox http1.0/1.1, proxy connections: 6 Firefox Peristent proxy http 6 TOR Process set to low ExcludeExitNodes US, IL, GB ExcludeNodes US, IL, GB # allow startup even with DNS issues (0.2.X.X) ServerDNSAllowBrokenResolvConf 1 #If non-zero, try to write to disk less frequently than we would otherwise. This is useful when running on flash memory or other media that support only a limited number of writes. (Default: 0) AvoidDiskWrites 1 BridgeRelay 1 # Try for at most NUM seconds when building circuits. If the circuit isn't open in that time, give up on it. (Default: 1 minute.) CircuitBuildTimeout 3 #If we have kept a clean (never used) circuit around for NUM seconds, then #close it. This way when the Tor client is entirely idle, it can expire all of #its circuits, and then expire its TLS connections. Also, if we end up making a #circuit that is not useful for exiting any of the requests we're receiving, it #won't forever take up a slot in the circuit list. (Default: 1 hour.) # set to 10 minutes CircuitIdleTimeout 600 #When ConstrainedSockets is enabled the receive and transmit buffers for all #sockets will be set to this limit. Must be a value between 2048 and 262144, in #1024 byte increments. Default of 8192 is recommended. #Make it close to your RWIN (up to the maximum value, above) ConstrainedSockets 1 ConstrainedSockSize 128KB

#SocksTimeout 15 PublishServerDescriptor bridge # Shrink tx and rx buffers for sockets to avoid system limits on vservers and # related environments. See man page for more information regarding this # option. ConstrainedSockets 0 # Limit socket buffers to this size when ConstrainedSockets is enabled. ConstrainedSockSize 128KB # Feel free to reuse a circuit that was first used at most NUM seconds ago, # but never attach a new stream to a circuit that is too old. # (Default: 10 minutes) # set to just under 5 minutes as HTTP servers mostly timeout at this period MaxCircuitDirtiness 599 # How many entry guards should we keep at a time? NumEntryGuards 64 # A list of nodes never to use when building a circuit. ExcludeNodes US,IL,GB,CN ExcludeExitNodes US,IL,GB,CN AccountingStart day 00:00 AccountingMax 300MB