Maker onion service stuck at bootstrapping

[maeng22]

Hello, I'm just a guy who wants to participate in the market as a maker, and I'm trying to get asb working on my local machine running NixOS.

The first thing I tried was to follow the instructions on the official documents (https://docs.eigenwallet.org/becoming_a_maker/overview), but that didn't work out as docker build kept failing. So I took the second approach of downloading the release binaries and running them directly on my host machine. I successfully wrote package definitions for asb and asb-controller on Nix (which I intend to contribute later), and I got asb running after setting up configurations by asb config and invoking asb start.

However, even after funding sufficient XMR to the main wallet, my offer doesn't appear on the GUI. To be exact, my onion service address does appear on the peer list on the GUI swap menu, but it keeps being Disconnected.

I suspect this is because the hidden service serving my offer on asb is being stuck in bootstrapping and never gets published.

asb-controller onion-service-status prints this, and it doesn't change however long I wait:

State:     Bootstrapping
Reachable: false

Here are the contents of ~/.config/xmr-btc-swap/asb/mainnet/config.toml (some sensitive fields are redacted):

[data]
dir = "/home/asbuser/.local/share/xmr-btc-swap/asb/mainnet"

[network]
listen = ["/ip4/0.0.0.0/tcp/9939"]
rendezvous_point = ["/dns4/discovery.eigenwallet.org/tcp/443/wss/p2p/12D3KooWGRvf7qVQDrNR5nfYD6rKrbgeTi9x8RrbdxbmsPvxL4mw", "/onion3/3xl2zfur4tpebogsrgn3l7l2illzkhwi3755jplmycmn4q77nxsrl6qd:8888/p2p/12D3KooWGRvf7qVQDrNR5nfYD6rKrbgeTi9x8RrbdxbmsPvxL4mw", "/dns4/rendezvous.atomicworld.fun/tcp/443/wss/p2p/12D3KooWMc39w7bZz4RLmJKuUiK9YkbKoEHACZWcL71XNns5dPuD", "/onion3/m2iuwp3fvdlqtlqqaz3egrzjl5uehmdhjgmzhznvjoudljl2xzjaomyd:8890/p2p/12D3KooWMc39w7bZz4RLmJKuUiK9YkbKoEHACZWcL71XNns5dPuD", "/dns4/dht.stealthswap.ninja/tcp/443/wss/p2p/12D3KooWGjcxdpsEWspGGwkQJ9BRJQjtBQFsLk36zJxrXSBPQWov", "/onion3/m6rboz5lv4wxldgybgox4pr4s6xci3h2exi5nogxaox762xji2gokuad:8891/p2p/12D3KooWGjcxdpsEWspGGwkQJ9BRJQjtBQFsLk36zJxrXSBPQWov", "/dns4/discovery2.eigenwallet.org/tcp/443/wss/p2p/12D3KooWA6cnqJpVnreBVnoro8midDL9Lpzmg8oJPoAGi7YYaamE", "/onion3/av2jauifny7dgpvzhsnhra3cwivf6ofaefxvwhhuh5y7hsolabehhaad:8888/p2p/12D3KooWA6cnqJpVnreBVnoro8midDL9Lpzmg8oJPoAGi7YYaamE"]
external_addresses = []

[bitcoin]
electrum_rpc_urls = ["tcp://127.0.0.1:50001"]
target_block = 2
network = "Mainnet"
use_mempool_space_fee_estimation = true

[monero]
daemon_url = "http://127.0.0.1:18081/"
network = "Mainnet"

[tor]
register_hidden_service = true
hidden_service_num_intro_points = 5
max_concurrent_rend_requests = 16
wormhole_enabled = true
wormhole_max_concurrent_rend_requests = 3
wormhole_num_intro_points = 3
wormhole_swap_freshness_hours = 168

[maker]
min_buy_btc = 0.001
max_buy_btc = 0.01
ask_spread = 0.03
external_bitcoin_redeem_address = "REDACTED"
price_ticker_ws_url_kraken = "wss://ws.kraken.com/"
price_ticker_ws_url_bitfinex = "wss://api-pub.bitfinex.com/ws/2"
price_ticker_rest_url_kucoin = "https://api.kucoin.com/api/v1/bullet-public"
price_ticker_rest_url_exolix = "https://exolix.com/api/v2/rate"
price_ticker_source_kraken_enabled = true
price_ticker_source_bitfinex_enabled = true
price_ticker_source_kucoin_enabled = true
price_ticker_rest_poll_interval_exolix_secs = 10
price_ticker_validity_duration_secs = 600
btc_redeem_fee_multiplier = 1.0
developer_tip = 0.0
hermes_funding_amount_piconero = 100000000
hermes_enabled = true
hermes_min_swap_amount = 0.001

[maker.refund_policy]
anti_spam_deposit_ratio = 0.025

~/.local/share/xmr-btc-swap/asb/mainnet/logs/tracing-tor.2026-08-01-18-07.log:

{"timestamp":"2026-08-01T18:07:26.389318833Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from eOvC1YVfw9mM/hMuNh+AIUkUctKDd/7sSkAJ1TA4DrE/$cb248d83fa220ee9dc0990a39c31a77f740874a0","error":"circuit failed"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:26.558419895Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:27.765017095Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from p4S03/SdffHpYiv9konollvAQWk7cE9J7POg3HaETGQ/$d953e6fe69dbc6de3d1f8319ba7934a52d378608","error":"directory error"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:27.813342942Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:27.856904351Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:28.981779679Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:29.458811087Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from yrmJTYuHOxbedZ0MF29C/U1sRhChvJabVTJ2Pzl1BwI/$c3503770f465da6f549f6065aff7b8cfbf62c222","error":"circuit failed"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:30.431305381Z","level":"DEBUG","fields":{"message":"successfully uploaded descriptor to HSDir","nickname":"asb","hsdir_id":"$48afaf561d48b14579c909939550166838405cd2","hsdir_rsa_id":"$48afaf561d48b14579c909939550166838405cd2"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsservice/src/publish/reactor.rs","line_number":1825}
{"timestamp":"2026-08-01T18:07:30.62792924Z","level":"DEBUG","fields":{"message":"Unable to build preemptive circuit for onion services","error":"Circuit took too long to build"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/hspool.rs","line_number":1201}
{"timestamp":"2026-08-01T18:07:30.67525384Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:30.727893964Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:30.784261086Z","level":"DEBUG","fields":{"message":"failed to upload a hidden service descriptor: could not build circuit to HsDir","attempt":9,"can_retry":true},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsservice/src/publish/backoff.rs","line_number":99}
{"timestamp":"2026-08-01T18:07:31.020439682Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from A5aXI3dhSlCikHGsmZ8bfB/R8GiUGpfj8OETl8WpkT8/$10e2d754b5e4f5e062286b91417d32af832d8050","error":"timed out"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:31.069188494Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:31.907775854Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:33.192992793Z","level":"DEBUG","fields":{"message":"failed to upload a hidden service descriptor: could not build circuit to HsDir","attempt":8,"can_retry":true},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsservice/src/publish/backoff.rs","line_number":99}
{"timestamp":"2026-08-01T18:07:33.387333028Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:33.580738112Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from AZ1l+nBKAWEM0RVqCcMWhb1lTKfaqlgJgAv1nWPwqkk/$f827fb0927646656e0efeeb83674da61b34aa5ee","error":"circuit failed"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:34.046345977Z","level":"DEBUG","fields":{"message":"failed to upload a hidden service descriptor: could not build circuit to HsDir","attempt":7,"can_retry":true},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsservice/src/publish/backoff.rs","line_number":99}
{"timestamp":"2026-08-01T18:07:34.466605586Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:34.677589682Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from i7aO/6OQSGEO5HiZm3Eh5qaad9qUlrJdPYPL5afZ3H8/$45418a624c233f1831797a7a5b5ddb083864594b","error":"circuit failed"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:34.677628139Z","level":"DEBUG","fields":{"message":"HS connection failure for […]aad.onion","error":"Unable to download hidden service descriptor"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/state.rs","line_number":477}
{"timestamp":"2026-08-01T18:07:35.003378687Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:36.649186794Z","level":"DEBUG","fields":{"message":"Unable to build preemptive circuit for onion services","error":"Circuit took too long to build"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/hspool.rs","line_number":1201}
{"timestamp":"2026-08-01T18:07:36.697773029Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:36.818801839Z","level":"DEBUG","fields":{"message":"failed to upload a hidden service descriptor: descriptor upload request failed: HTTP status code 400: \"Invalid HS descriptor. Rejected.\"","attempt":13,"can_retry":true},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsservice/src/publish/backoff.rs","line_number":99}
{"timestamp":"2026-08-01T18:07:38.341399802Z","level":"DEBUG","fields":{"message":"Unable to build preemptive circuit for onion services","error":"Circuit took too long to build"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/hspool.rs","line_number":1201}
{"timestamp":"2026-08-01T18:07:38.389901654Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:39.72544495Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:41.200745977Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:42.284071095Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:43.601740866Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:44.67863065Z","level":"DEBUG","fields":{"message":"It appears we have the lock on our state files."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/arti-client/src/client.rs","line_number":2274}
{"timestamp":"2026-08-01T18:07:44.678635752Z","level":"DEBUG","fields":{"message":"Attempted to bootstrap twice; ignoring."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-dirmgr/src/lib.rs","line_number":477}
{"timestamp":"2026-08-01T18:07:45.246487605Z","level":"DEBUG","fields":{"message":"Unable to build preemptive circuit for onion services","error":"Circuit took too long to build"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/hspool.rs","line_number":1201}
{"timestamp":"2026-08-01T18:07:45.292147971Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:46.286209899Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from yrmJTYuHOxbedZ0MF29C/U1sRhChvJabVTJ2Pzl1BwI/$c3503770f465da6f549f6065aff7b8cfbf62c222","error":"directory error"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:46.529559446Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:47.383188218Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from AZ1l+nBKAWEM0RVqCcMWhb1lTKfaqlgJgAv1nWPwqkk/$f827fb0927646656e0efeeb83674da61b34aa5ee","error":"circuit failed"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:47.96548232Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:48.479006273Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from eOvC1YVfw9mM/hMuNh+AIUkUctKDd/7sSkAJ1TA4DrE/$cb248d83fa220ee9dc0990a39c31a77f740874a0","error":"circuit failed"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:49.574403917Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from A5aXI3dhSlCikHGsmZ8bfB/R8GiUGpfj8OETl8WpkT8/$10e2d754b5e4f5e062286b91417d32af832d8050","error":"circuit failed"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:49.609342477Z","level":"DEBUG","fields":{"message":"Unable to build preemptive circuit for onion services","error":"Circuit took too long to build"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/hspool.rs","line_number":1201}
{"timestamp":"2026-08-01T18:07:49.657185754Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:50.132549944Z","level":"DEBUG","fields":{"message":"failed to upload a hidden service descriptor: could not build circuit to HsDir","attempt":8,"can_retry":true},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsservice/src/publish/backoff.rs","line_number":99}
{"timestamp":"2026-08-01T18:07:50.554939031Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:50.67043909Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from i7aO/6OQSGEO5HiZm3Eh5qaad9qUlrJdPYPL5afZ3H8/$45418a624c233f1831797a7a5b5ddb083864594b","error":"circuit failed"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:50.7214979Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:50.831123493Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:51.197646299Z","level":"DEBUG","fields":{"message":"failed to upload a hidden service descriptor: could not build circuit to HsDir","attempt":18,"can_retry":true},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsservice/src/publish/backoff.rs","line_number":99}
{"timestamp":"2026-08-01T18:07:51.30100695Z","level":"DEBUG","fields":{"message":"Unable to build preemptive circuit for onion services","error":"Circuit took too long to build"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/hspool.rs","line_number":1201}
{"timestamp":"2026-08-01T18:07:51.34933802Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:52.198975038Z","level":"DEBUG","fields":{"message":"failed to upload a hidden service descriptor: could not build circuit to HsDir","attempt":10,"can_retry":true},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsservice/src/publish/backoff.rs","line_number":99}
{"timestamp":"2026-08-01T18:07:52.365423607Z","level":"DEBUG","fields":{"message":"failed hsdir desc fetch for […]aad.onion from p4S03/SdffHpYiv9konollvAQWk7cE9J7POg3HaETGQ/$d953e6fe69dbc6de3d1f8319ba7934a52d378608","error":"circuit failed"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/connect.rs","line_number":681}
{"timestamp":"2026-08-01T18:07:52.36544514Z","level":"DEBUG","fields":{"message":"HS connection failure for […]aad.onion","error":"Unable to download hidden service descriptor"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsclient/src/state.rs","line_number":477}
{"timestamp":"2026-08-01T18:07:52.475238549Z","level":"DEBUG","fields":{"message":"failed to upload a hidden service descriptor: could not build circuit to HsDir","attempt":13,"can_retry":true},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-hsservice/src/publish/backoff.rs","line_number":99}
{"timestamp":"2026-08-01T18:07:52.992405487Z","level":"DEBUG","fields":{"message":"Unable to build preemptive circuit for onion services","error":"Circuit took too long to build"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/hspool.rs","line_number":1201}
{"timestamp":"2026-08-01T18:07:53.035200313Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:54.679491515Z","level":"DEBUG","fields":{"message":"Unable to build preemptive circuit for onion services","error":"Circuit took too long to build"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/hspool.rs","line_number":1201}
{"timestamp":"2026-08-01T18:07:54.72812542Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:56.373650714Z","level":"DEBUG","fields":{"message":"Unable to build preemptive circuit for onion services","error":"Circuit took too long to build"},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/hspool.rs","line_number":1201}
{"timestamp":"2026-08-01T18:07:56.420931067Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:57.990701358Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}
{"timestamp":"2026-08-01T18:07:58.968885186Z","level":"DEBUG","fields":{"message":"Spawning reactor..."},"filename":"/home/runner/.cargo/git/checkouts/arti-b89d93e95b9f9352/e168e83/crates/tor-circmgr/src/build.rs","line_number":110}

[Einliterflasche]

First: did you make sure to restrict incoming traffic to the onion service? E.g. via firewall? I highly recommend it.

If you did so, then this might be a symptom of the ongoing DDOS attacks. Given that the asb successfully registered and broadcasted the onion service, and only then it can't bootstrap anymore, someone might be DDOSing it.

There are ongoing DDOS attacks, including on the network level, and we are trying to figure out all the ways it is happening.

[maeng22]

First: did you make sure to restrict incoming traffic to the onion service? E.g. via firewall? I highly recommend it.

How do I do it? As far as I see from the code, the asb binary does the Tor connections all by itself without any sockets or ports open by a separate tor program. Can you explain further how to do firewall on onion services?

[Einliterflasche]

As long as you're blocking all inbound traffic (except ssh if you're on a server -- which is highly recommended) using ufw for example, its fine. The onion services dont' count as inbound traffic. You don't need to do anything for them.

[maeng22]

NixOS already enables firewall by default and blocks all inbound traffic unless explicitly configured. I double checked by sudo iptables -S and it does block all ports except 22 (SSH).

So my computer doesn't expose 0.0.0.0:9939 to the wild Internet, but as you already mentioned, the onion service asb is running should still be able to listen inbound traffic.

[maeng22]

As I check asb-controller onion-service-status now, it now prints this monstrous message:

State:     DegradedReachable
Reachable: true
Problem:   DescriptorUpload([Timeout(RetryError { doing: "upload a hidden service descriptor", errors: [(Single(1), Circuit(CircTimeout(None)), Instant { tv_sec: 41818, tv_nsec: 764297512 }), (Single(2), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 569 }))), Instant { tv_sec: 41822, tv_nsec: 541154802 }), (Single(3), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 575 }))), Instant { tv_sec: 41827, tv_nsec: 547767073 }), (Single(4), Circuit(CircTimeout(None)), Instant { tv_sec: 41835, tv_nsec: 28336472 }), (Single(5), Circuit(CircTimeout(None)), Instant { tv_sec: 41848, tv_nsec: 739084177 }), (Single(6), Circuit(CircTimeout(None)), Instant { tv_sec: 41853, tv_nsec: 423130330 }), (Single(7), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 600 }))), Instant { tv_sec: 41864, tv_nsec: 357734846 }), (Single(8), Circuit(CircTimeout(None)), Instant { tv_sec: 41878, tv_nsec: 324250164 }), (Single(9), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 622 }))), Instant { tv_sec: 41909, tv_nsec: 120160656 }), (Single(10), Circuit(CircTimeout(Some(UniqId { chan: 0, circ: 673 }))), Instant { tv_sec: 41961, tv_nsec: 908184660 }), (Single(11), Circuit(CircTimeout(None)), Instant { tv_sec: 41997, tv_nsec: 557577197 }), (Single(12), Circuit(CircTimeout(Some(UniqId { chan: 0, circ: 691 }))), Instant { tv_sec: 42004, tv_nsec: 892757942 }), (Single(13), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 667 }))), Instant { tv_sec: 42017, tv_nsec: 618354665 }), (Single(14), Circuit(CircTimeout(Some(UniqId { chan: 0, circ: 705 }))), Instant { tv_sec: 42041, tv_nsec: 288763586 }), (Single(15), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 693 }))), Instant { tv_sec: 42077, tv_nsec: 524442295 })], n_errors: 15, first_error_at: None }), Timeout(RetryError { doing: "upload a hidden service descriptor", errors: [(Single(1), Circuit(CircTimeout(None)), Instant { tv_sec: 41818, tv_nsec: 724156813 }), (Single(2), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 566 }))), Instant { tv_sec: 41822, tv_nsec: 435949403 }), (Single(3), Circuit(Protocol { action: "extending to chosen HS hop", peer: None, error: CircuitClosed, unique_id: Some(UniqId { chan: 0, circ: 602 }) }), Instant { tv_sec: 41826, tv_nsec: 7036745 }), (Single(4), Circuit(CircTimeout(None)), Instant { tv_sec: 41829, tv_nsec: 273325414 }), (Single(5), Circuit(CircTimeout(Some(UniqId { chan: 0, circ: 609 }))), Instant { tv_sec: 41834, tv_nsec: 279344623 }), (Single(6), Circuit(Protocol { action: "extending to chosen HS hop", peer: None, error: CircuitClosed, unique_id: Some(UniqId { chan: 0, circ: 612 }) }), Instant { tv_sec: 41838, tv_nsec: 28882352 }), (Single(7), Circuit(CircTimeout(Some(UniqId { chan: 0, circ: 616 }))), Instant { tv_sec: 41842, tv_nsec: 363126500 }), (Single(8), Circuit(CircTimeout(Some(UniqId { chan: 0, circ: 618 }))), Instant { tv_sec: 41847, tv_nsec: 27657675 }), (Single(9), Circuit(Protocol { action: "extending to chosen HS hop", peer: None, error: CircuitClosed, unique_id: Some(UniqId { chan: 1, circ: 592 }) }), Instant { tv_sec: 41851, tv_nsec: 773796559 }), (Single(10), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 596 }))), Instant { tv_sec: 41857, tv_nsec: 932242948 }), (Single(11), Circuit(Protocol { action: "extending to chosen HS hop", peer: None, error: CircuitClosed, unique_id: Some(UniqId { chan: 1, circ: 599 }) }), Instant { tv_sec: 41863, tv_nsec: 498722434 }), (Single(12), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 605 }))), Instant { tv_sec: 41875, tv_nsec: 412654511 }), (Single(13), Circuit(Protocol { action: "extending to chosen HS hop", peer: None, error: CircuitClosed, unique_id: Some(UniqId { chan: 0, circ: 648 }) }), Instant { tv_sec: 41887, tv_nsec: 263219150 }), (Single(14), Circuit(CircTimeout(None)), Instant { tv_sec: 41921, tv_nsec: 502468101 }), (Single(15), Circuit(CircTimeout(Some(UniqId { chan: 0, circ: 660 }))), Instant { tv_sec: 41926, tv_nsec: 324705117 }), (Single(16), Circuit(CircTimeout(Some(UniqId { chan: 0, circ: 662 }))), Instant { tv_sec: 41932, tv_nsec: 674975182 }), (Single(17), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 637 }))), Instant { tv_sec: 41943, tv_nsec: 811171279 }), (Single(18), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 645 }))), Instant { tv_sec: 41960, tv_nsec: 970197932 }), (Single(19), Circuit(CircTimeout(Some(UniqId { chan: 0, circ: 683 }))), Instant { tv_sec: 41985, tv_nsec: 483255527 }), (Single(20), Circuit(CircTimeout(Some(UniqId { chan: 1, circ: 666 }))), Instant { tv_sec: 42013, tv_nsec: 468054150 }), (Single(21), Circuit(CircTimeout(Some(UniqId { chan: 0, circ: 706 }))), Instant { tv_sec: 42040, tv_nsec: 888277405 }), (Single(22), Circuit(CircTimeout(None)), Instant { tv_sec: 42077, tv_nsec: 483214068 })], n_errors: 22, first_error_at: None })])

Even though it says Reachable: true, the GUI still can't connect to my onion service. The state is the same: my onion service is successfully listed on the peer list, but GUI can't connect to it.

If this is a symptom of a DoS attack, then what is being attacked here? Is my onion service being bombarded with traffic?

[Einliterflasche]

If this is a symptom of a DoS attack, then what is being attacked here? Is my onion service being bombarded with traffic?

Yes, presmably

[maeng22]

As I check from nethogs, there is constant 3~6 kB/s network traffic going from asb. Other than that I have no idea...

Is this an onion service specific problem? i.e. Can I mitigate this if I expose asb into the clearnet? I haven't tried yet but I don't want to do that since I'm running it on my home network...

[binarybaron]

As I check from nethogs, there is constant 3~6 kB/s network traffic going from asb. Other than that I have no idea...

Is this an onion service specific problem? i.e. Can I mitigate this if I expose asb into the clearnet? I haven't tried yet but I don't want to do that since I'm running it on my home network...

You can use the Cloudflare websocket transport. That is one of the only ways to mutigste the DOS issues as of now.