Realities of hosting a tor relay node at home

Submitted ⁨⁨1⁩ ⁨day⁩ ago⁩ by ⁨Maroon@lemmy.world⁩ to ⁨selfhosted@lemmy.world⁩

I am in the EU. I want to help make the TOR network more robust by contributing a relay node. I have one of three hardware options: a raspberry pi zero W, raspberry pi 4B, or ThinkPad T470s.

In your practical experience, which of these computers would be the best for the network? As I understand, beyond a point, the CPU power doesn’t matter unless massive traffic loads go through the node.

P.S: Not sure if this is relevant, but I currently have a pihole hosted in a separate RPI zero. I plan to host this at home. I do not have a separate connection line. My router doesn’t support vlan.

source

Comments

Sort:hotnew top

MysteriousSophon21@lemmy.world ⁨1⁩ ⁨hour⁩ ago
If you do end up hosting on a VPS, consider one with renewable energy since tor nodes can consume a lot of power over time - or for home setups, you could run it off a portable power station to offset electricity costs (check out power station comparisons to find the best wh value for continous loads).

source
thr0w4w4y2@sh.itjust.works ⁨1⁩ ⁨day⁩ ago
Tor operator here.

If you don’t have a second IP for your relay, don’t host at home. You will have CAPTCHAs everywhere, many sites will block you and your ISP will eventually contact you to stop degrading their IP space reputation.

Most website owners don’t discriminate between Tor exits and relays. They subscribe to block-lists that include all known Tor IP addresses. Major online services will make your browsing experience really shitty and once you’re a “known Tor IP” it will take months to remove that reputation.

source
- 3dcadmin@lemmy.relayeasy.com ⁨1⁩ ⁨day⁩ ago
  to be fair I really just used my relay for myself and didn’t run into that many issues… but this IS the reality if you want to help others like you said…
  
  source
- teppa@piefed.ca ⁨1⁩ ⁨day⁩ ago
  Could you route through a VPN like Torguard or something?
  
  source
irmadlad@lemmy.world ⁨1⁩ ⁨day⁩ ago
For the Tor operators, how to you mitigate the risks associated with what’s being trafficked across your network?

source
DaPorkchop_@lemmy.ml ⁨1⁩ ⁨day⁩ ago
I have tried hosting a Tor relay on a VPS in the past and it was bottlenecked by the CPU at barely 20MB/s, although to be fair this was without hardware AES. More importantly for you, the server’s IP started getting DDoSed constantly and a whole bunch of big internet services just immediately blocked the address (the list of relay IPs is public and many things just block every address on that list instead of only exit nodes). So any of your machines are probably at least somewhat up to the task (ideally if they have hardware AES support), but this is definitely not something I’d do on my home network.

source
- possiblylinux127@lemmy.zip ⁨1⁩ ⁨day⁩ ago
  Were you using ancient hardware or something? More modern CPUs shouldn’t have this issue.
  
  source
Novocirab@feddit.org ⁨1⁩ ⁨day⁩ ago
Rather than running a Tor relay, running a bridge (e.g. via the browser add-on Snowflake as suggested by @ryokimball@infosec.pub is probably the best thing to do with one’s home hardware.

Actual relays must suffice certain requirements, according to the Tor project:

Requirements for Tor relays depend on the type of relay and the bandwidth they provide. ==== Bandwidth and Connections ====

A non-exit relay should be able to handle at least 7000 concurrent connections. This can overwhelm consumer-level routers. If you run the Tor relay from a server (virtual or dedicated) in a data center you will be fine. If you run it behind a consumer-level router at home you will have to try and see if your home router can handle it or if it starts failing. Fast exit relays (>=100 Mbit/s) usually have to handle a lot more concurrent connections (>100k).

It is recommended that a relay have at least 16 Mbit/s (Mbps) upload bandwidth and 16 Mbit/s (Mbps) download bandwidth available for Tor. More is better. The minimum requirements for a relay are 10 Mbit/s (Mbps). If you have less than 10 Mbit/s but at least 1 Mbit/s we recommend you run a [/wiki/doc/PluggableTransports/obfs4proxy bridge with obfs4 support]. If you do not know your bandwidth you can use beta.speedtest.net to measure it.

As for exit relays aka exit nodes, the obligatory advice is of course to not run them at all unless you know exactly what you are doing both legally and technically, and probably only if you’re a foundation or something.

source
supervent@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago
I’m a Tor relay operator. For years, I ran a Tor guard/middle relay, but I often ran into issues with certain services and websites that would blacklist my IP address within days of changing it. After dealing with that for a long time, I eventually got tired of the hassle and switched to running a Tor bridge instead, to help people bypass censorship in authoritarian countries. I think it’s a better fit for a home connection.

source
Tramort@programming.dev ⁨1⁩ ⁨day⁩ ago
A relay node should be no issue.

An exit node is what’s more difficult

source
possiblylinux127@lemmy.zip ⁨1⁩ ⁨day⁩ ago
Host a middle node

Do not host a entry node or a exit node. Also none of the hardware you listed is great for hosting. It could work but I would go for somethinga little more modern. Something like a i5-7500 would be great. Get a router with vlans since you probably will want to segment the network.

For networking make sure you have a solid low latency reasonable bandwidth connection. I would do gigabit fiber since that will provide a decent amount of bandwidth while having low latency.

source
ryokimball@infosec.pub ⁨1⁩ ⁨day⁩ ago
snowflake.torproject.org

I feel like I should mention the Snowflake browser plug-in, which to my understanding, creates a relay in your browser basically.

source
- Infernal_pizza@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago
  I think snowflake is a bridge rather than a relay
  
  source
- swelter_spark@reddthat.com ⁨1⁩ ⁨day⁩ ago
  It can also be run as a standalone background service, so you don’t have to have a browser window open all the time. I’ve run one for years. Super easy.
  
  source
3dcadmin@lemmy.relayeasy.com ⁨1⁩ ⁨day⁩ ago
Hey there are various ways to do it, but if you have a suitable bit of hardware I’d self host at home - just because! Pi 4B would be better but you can quickly get loads of traffic so if you broadband isn’t great it can slow things down! If you want to host a tor relay and self host other stuff there are means and ways to do that as well. I have run a tor relay before through yunohost for example

source
The_Zen_Cow_Says_Mu@infosec.pub ⁨1⁩ ⁨day⁩ ago
there is an official docker container to run a bridge, which is probably the easiest option. no idea if it supports pi/arm though.

source