Iâm sorry to bother but still not works properly
So I did reinstall and everything, i setup load balancer it got better. Rightnow uptime about 100% because of my workarounds with load balancers and those cron VM resets, but I still want to make it work properly.
Uptime 100% because one of two whonix VMs are online at one particular moment. But whenever I login to load balancer I rarely see them both online. Only after restart it works for some time.
Oct 06 13:18:58 host vanguards[737]: WARNING[Tue Oct 06 13:18:58 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 1705 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:18:58 host vanguards[737]: NOTICE[Tue Oct 06 13:18:58 2020]: We force-closed circuit 1705
Oct 06 13:18:59 host vanguards[737]: WARNING[Tue Oct 06 13:18:59 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 1730 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:18:59 host vanguards[737]: NOTICE[Tue Oct 06 13:18:59 2020]: We force-closed circuit 1730
Oct 06 13:19:00 host vanguards[737]: WARNING[Tue Oct 06 13:19:00 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 1738 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:19:00 host vanguards[737]: NOTICE[Tue Oct 06 13:19:00 2020]: We force-closed circuit 1738
Oct 06 13:19:00 host vanguards[737]: WARNING[Tue Oct 06 13:19:00 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 1736 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:19:00 host vanguards[737]: NOTICE[Tue Oct 06 13:19:00 2020]: We force-closed circuit 1736
Oct 06 13:19:01 host vanguards[737]: WARNING[Tue Oct 06 13:19:01 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 1735 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:19:01 host vanguards[737]: NOTICE[Tue Oct 06 13:19:01 2020]: We force-closed circuit 1735
Oct 06 13:30:09 host vanguards[737]: WARNING[Tue Oct 06 13:30:09 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 2089 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:30:09 host vanguards[737]: NOTICE[Tue Oct 06 13:30:09 2020]: We force-closed circuit 2089
Oct 06 13:30:09 host vanguards[737]: WARNING[Tue Oct 06 13:30:09 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 2088 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:30:09 host vanguards[737]: NOTICE[Tue Oct 06 13:30:09 2020]: We force-closed circuit 2088
Oct 06 13:30:12 host vanguards[737]: WARNING[Tue Oct 06 13:30:12 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 2117 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:30:12 host vanguards[737]: NOTICE[Tue Oct 06 13:30:12 2020]: We force-closed circuit 2117
Oct 06 13:30:12 host vanguards[737]: WARNING[Tue Oct 06 13:30:12 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 2119 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:30:12 host vanguards[737]: NOTICE[Tue Oct 06 13:30:12 2020]: We force-closed circuit 2119
Oct 06 13:41:32 host vanguards[737]: WARNING[Tue Oct 06 13:41:32 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 2503 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:41:32 host vanguards[737]: NOTICE[Tue Oct 06 13:41:32 2020]: We force-closed circuit 2503
Oct 06 13:52:56 host vanguards[737]: WARNING[Tue Oct 06 13:52:56 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 2722 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:52:56 host vanguards[737]: NOTICE[Tue Oct 06 13:52:56 2020]: We force-closed circuit 2722
Oct 06 13:53:52 host vanguards[737]: WARNING[Tue Oct 06 13:53:52 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 2753 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:53:52 host vanguards[737]: NOTICE[Tue Oct 06 13:53:52 2020]: We force-closed circuit 2753
Oct 06 13:53:53 host vanguards[737]: WARNING[Tue Oct 06 13:53:53 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 2778 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:53:53 host vanguards[737]: NOTICE[Tue Oct 06 13:53:53 2020]: We force-closed circuit 2778
Oct 06 13:53:56 host vanguards[737]: WARNING[Tue Oct 06 13:53:56 2020]: Possible Tor bug, or possible attack if very frequent: Got 1 dropped cell on circ 2788 (in state CIRCUIT_PADDING None; old state HS_CLIENT_INTRO HSCI_INTRO_SENT)
Oct 06 13:53:56 host vanguards[737]: NOTICE[Tue Oct 06 13:53:56 2020]: We force-closed circuit 2788
Right now was able to catch this log, tor says it cant reach entry guards or something. Second whonix VM works fine at this moment. So tried to attach nyx screenshot, but dont have permissions to post images. Anyways it shows same log and about several kb/s which is just tor negotiation traffic, it should be much more when working indeed. I wonder wtf, could it be some networking problems, or entry guards thinking I am DDOSing them (but its just tor app) or could it be 2 whonixes cant work from one ip (but it always worked before) or might be some attack and this is tor protection (tho there is no ddosing happening, but might be some other attack maybe)?
Just need to understand what does those logs mean. If entry guards block me indeed I can buy some VPS for socks so second whonix will have different ip (or setup bridge there).