Non Anonymous Onion Encryption and NAT Traversal
Documentation for this is incomplete. Contributions are happily considered! See this for potential alternatives.
Introduction[edit]
It is possible to make Tor on a server using a single Tor hop (only one Tor relay instead of three) by using Tor configuration options HiddenServiceNonAnonymousMode 1
, HiddenServiceSingleHopMode 1
. This is non-anonymous but faster. Server should use Onions Services Authentication. The advantage of this is to have a server which is:
- reachable (for users having access to Tor) for NAT traversal, i.e. it works behind common NAT routers.
- capable to secure inherently insecure protocols (such as VNC) by using the encryption / authentication provided by Tor Onion Services
Independently, if clients prefer speed over anonymity, they can configure Tor in Tor2Web mode, which means outgoing Tor circuits will have a length of one rather than three.
These two options combined reduce a 6 hop Tor connection to a 2 hop Tor connection. It's not anonymous, but providing NAT traversal as well as onion encryption / authentication.
https://forums.whonix.org/t/should-we-use-hiddenservicesinglehopmode-for-whonix-org-server
Server Side[edit]
Open /usr/local/etc/torrc.d/50_user.conf
.
If you are using Kicksecure ™ inside Qubes, complete the following steps.
Qubes App Launcher (blue/grey "Q")
→ Kicksecure ™ ProxyVM (commonly named kicksecure)
→ Tor User Config (Torrc)
If you are using a graphical Kicksecure ™, complete the following steps.
Start Menu
→ Applications
→ Settings
→ /usr/local/etc/torrc.d/50_user.conf
If you are using a terminal-only Kicksecure ™, complete the following steps.
Add.
Save and exit.
Client Side[edit]
Update the package lists.
Install Tor's build dependencies.
Create directory ~/tor-src
.
Change directory to ~/tor-src
.
Download the Tor source package.
Change directory to Tor source directory.
Open file debian/rules
in a text editor of your choice as a regular, non-root user.
If you are using a graphical environment, run.
If you are using a terminal, run.
Change:
To:
Open file src/or/config.c
in a text editor of your choice as a regular, non-root user.
If you are using a graphical environment, run.
If you are using a terminal, run.
Change
To
Build the Tor package.
Footnotes[edit]
Unfinished: This wiki is a work in progress. Please do not report broken links until this notice is removed, use Search Engines First and contribute improving this wiki.