Skip to content

How to set up a Tor relay

How to install and run a Tor middle relay, written from the operating experience of a Taiwan-based volunteer community. The installation itself is not region-specific, so the steps apply anywhere. Where local law or ISP conditions matter, we say so and point you to sources for your own jurisdiction.

Considerations before you start

If you are not yet familiar with how Tor works, start with What is Tor? and Types of relays on the Tor network on the Tor Project's own site. They keep those current in a way we cannot match.

How Tor relays work
How Tor relays work

This guide only covers a middle relay. If you want to run something more exposed, work through these questions first and decide how much risk you are willing to accept:

  • Do you want to run a Tor exit or non-exit (bridge/guard/middle) relay?
  • If you want to run an exit relay: which ports do you want to allow in your exit policy? More ports usually means more abuse complaints.
  • What external TCP port do you want to use for incoming Tor connections? For the ORPort setting we recommend port 443 if no other daemon on your server is using it, because it is often one of the few ports left open on public Wi-Fi. Port 9001 is another common choice.
  • What email address will you use in the ContactInfo field of your relay? This information is public.
  • How much bandwidth and monthly traffic do you want to allow for Tor traffic?
  • Does the server have an IPv6 address?

How to set up a middle relay

Setting up a middle relay takes some technical knowledge and a basic install-and-configure workflow. We recommend Debian or Ubuntu, and the examples below use them.

Other operating systems

For other operating systems or more detailed installation instructions, refer to the official documentation: Tor Project | Middle/Guard relay.

Install Tor

apt update
apt install tor

Choosing a different version

There might be situations where Tor is not the latest version in various Linux distributions. If you need to install the latest or testing version, you can refer to the official documentation to make adjustments: Why and how can I enable the Tor Package Repository in Debian?

Setup

Edit configuration file: /etc/tor/torrc

Nickname    myNiceRelay # Adjust "myNiceRelay" to the name you want to display publicly.
ContactInfo your@e-mail # Contact information, will be displayed publicly.
                        # If you don't want it to be public, you can set it to none.
ORPort      9001        # The default port is 9001.
                        # Port 443 is often one of the few ports left open on
                        # restrictive networks, so using it can help users there
                        # reach your relay. Remember to open the matching port on
                        # your firewall and router.
ExitRelay   0           # Do not become an exit relay.
SocksPort   0
Log notice file /var/log/tor/notices.log # Enable logging

Restart Tor. The default instance is tor@default.

systemctl restart tor@default

Check the logs or system log /var/log/syslog for the text Self-testing indicates your ORPort and a message indicating reachable. After about three hours your relay should appear on Relay Search. It can take longer, and that is normal, so resist the urge to start changing settings while you wait.

Post-installation precautions

After installation, you can refer to the official documentation for important considerations: Tor Project | Relay Post-install and good practices.

Monitor the relay with nyx

nyx is a terminal status monitor for Tor. Install it, then run nyx to watch your relay's bandwidth, connections, and log output live.

apt install nyx
nyx

Run multiple relays with tor-instance-create

tor-instance-create creates multiple independent Tor instances on the same server, which keeps the configuration and logs of each relay separate and easier to manage. It ships with the tor package on Debian and Ubuntu.

Running several instances does not make any of them more anonymous. The benefit is operational: separate config, separate data directory, separate log.

Create a new Tor instance

The command takes the instance name; the matching systemd unit is then tor@<instance-name>.

tor-instance-create {instance-name}
tor-instance-create mytor2

This will create a new Tor instance named mytor2, with its configuration directory created under /var/lib/tor-instances/mytor2.

Edit the new instance configuration

The new configuration file is located at /var/lib/tor-instances/mytor2/torrc. In this configuration file, you can set various parameters, such as:

ORPort 9002  # Set a new ORPort, ensuring each instance uses a different port.
DataDirectory /var/lib/tor-instances/mytor2/data
Log notice file /var/lib/tor-instances/mytor2/notice.log

Start

Start or restart the newly created Tor instance.

# systemctl start tor@{instance-name}
systemctl start tor@mytor2

Monitor the new instance with nyx

nyx -s /run/tor-instances/{instance-name}/control

Common questions

Will the police come after me for setting up a Tor relay?

There are three types of relays: guard, middle, and exit. Guard and middle relays only forward traffic inside the Tor network and never connect to a final destination, so there is little risk of law enforcement getting in touch. Running an exit relay carries real legal risk and needs careful consideration.

Is it feasible to set up a relay using a home network?

Setting up a Tor relay over a home network (e.g., using broadband or cable internet) may require configuring the router provided by your ISP, which can have some technical challenges. Home routers block all inbound connections by default, so you need to allow inbound traffic on your ORPort in the firewall and forward that port on the router.

Why should I run a Tor relay?

Running a Tor relay helps expand the Tor network's bandwidth and stability, allowing more people to browse the internet safely and anonymously. This is vital for promoting internet freedom and privacy rights.

What benefits do I get from running a Tor relay?

Although operating a Tor relay doesn't offer direct financial rewards, it promotes global internet freedom and supports free speech and privacy. It also makes you part of the open-source community, contributing to the infrastructure for an anonymous internet.

Does running a Tor relay require extensive technical knowledge?

Not necessarily. Basic networking knowledge (like IP addresses and port settings) is helpful, but Tor provides detailed installation guides, and many community forums offer support. Anyone interested can learn and set up a relay.

Is running a Tor relay legal?

We can only speak to Taiwan, where the internet is relatively free and running a Tor relay is currently legal. Legal situations change, so it is worth following internet freedom issues and legislation where you are. Running an exit relay carries more legal risk, so read up on your local regulations first.

For jurisdictions outside Taiwan, the EFF's Legal FAQ for Tor Relay Operators is the standard starting point.

What are the requirements for running a Tor relay?

Make sure your network has stable upload and download speeds. The Tor Project recommends at least 10 Mbit/s (about 1.25 MB/s) in each direction for a relay, see Relay requirements. If you have more than 1 Mbit/s but less than 10 Mbit/s, the Tor Project suggests running an obfs4 bridge instead of a relay. You also need a static IP address. Check that your ISP permits this kind of traffic and that your network equipment (firewall and router) can be configured for the required port forwarding.

Will a Tor relay affect my internet speed?

A Tor relay only uses up to the bandwidth limit you configure, so it will not consume all your available capacity. You might still notice slight speed reductions under heavy load. You can adjust the bandwidth limits in the settings as needed.

How do I protect my privacy while running a Tor relay?

Tor relays do not access or track users' traffic themselves, but it's advisable to be cautious with identifiable information, like not using an email address that contains personal details. Regularly update the Tor software for enhanced security.

How do I upgrade my Tor relay software?

Keeping the Tor software updated is essential for security patches and new features. On most Linux systems, you can update Tor via the package manager. Windows and macOS users should regularly check the Tor website for updates.

How can I become a guard relay?

Guard relays are selected automatically by the Tor network and cannot be configured manually. If your relay runs stably and has enough bandwidth, it may be chosen as a guard.

Where to go from here