Site Tools


advanced-tor

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
advanced-tor [2022/01/26 19:01] rs232advanced-tor [2023/08/05 19:15] (current) – [TOR Settings] -remove top node from dhcp/dns/tftp link hogwild
Line 1: Line 1:
 ====== TOR ====== ====== TOR ======
  
-Tor or Onion network is a security project that increases anonymity of traffic. The idea is to redirect connections via random nodes in Internet. It's a complex protocol and we're not going to go much in details here but for anything extra needed as usual the official documentation is the place to consult first. Encryption, anonymization and multi-hop come with a price as the ultimate user experience is likely to be affected negatively. You will not want to send interactive traffic over the Tor network nor heavy downloads as the multi-hop increases latency significantly.\\+===== What is Tor? =====
  
-{{:pasted:20220126-184923.png}}\\ +Tor ("The Onion Router") is a security protocol used to increase the anonymity of Internet traffic. Tor's "Onion" routing is implemented at the application layer of the OSI model of the network stack. The TOR network is run as a free, worldwide, volunteer-run overlay network consisting of more than seven thousand relays. 
-**Enable TOR** Be patient. Starting the TOR client can take from several seconds to several minutes.\\ + 
-**Socket Port**:FIXME\\ +When you use the Tor browser, the Tor network does not directly connect your computer to that website. Instead, traffic from your browser is intercepted by Tor and bounced to a random number of other Tor users’ computers before passing the request to its final website destination. The same process is reversed to enable the destination website to communicate with you, the Tor user. 
-**Trans Port**:FIXME\\ + 
-**DNS Port**:FIXME\\ +The encryption process that Tor software uses obscures users' identities, requests, communications, and transactions while still enabling them to use the Internet as they normally would. 
-**Data Directory**: Specify where you want Tor to store its own temporarily data.\\+ 
 +For more details about how Tor works, please see here[[https://skerritt.blog/how-does-tor-really-work/|Skerritt Blog: How does Tor Really work?]] 
 + 
 +==== Limitations ==== 
 + 
 +=== Speed === 
 + 
 +Encryption, anonymization and multiple hops come at a priceTor slows your network traffic, since the path that packets take is more complex (circuitous) than with normal traffic. You will probably not want to send interactive traffic over the Tor network. Nor is it recommended that you do heavy downloading (such as Torrents) via Tor. The multiple hops increases latency significantly. 
 + 
 +=== Domain resolution === 
 + 
 +The Tor network includes its own internal DNS system which is specifically authoritative for the ".onion" domain. This domain exists only within the Tor network. Some modern browsers include built-in functions to resolve ".onion" domains which append ".link" or ".cab" to the ".onion" domain. Check your browser's documentation for details. 
 + 
 + 
 +===== TOR Settings ===== 
 + 
 + \\ 
 + 
 +**Enable TOR:**  Checking this enables the Tor client. Be patient. Starting TOR can take from several seconds to several minutes. 
 + 
 +**Socks Port:** 
 + 
 + \\ 
 + 
 +{{:pasted:20220126-184923.png}}\\  \\  \\ 
 + 
 +**Trans Port:**  FIXME 
 + 
 +**DNS Port:**  FIXME 
 + 
 +**Data Directory:**  Here, you can specify where Tor will store its temporary data.\\  \\ 
 + 
 + \\
  
 {{:pasted:20220126-185229.png}}\\ {{:pasted:20220126-185229.png}}\\
-**Only solve .onion/.exit domains**: If enabled only .onions domains will be redirected towards the tor network. Please note you will also have to enable the Advanced-DHCP/DNS option: ''Solve .onion using Tor (enable Tor first)''\\ 
-**Redirect all users from**: LANx/Selected IPs - You can define the gere the source LAN or IPs that will be using tor.\\ 
-**Redirect TCP Ports**: TCP 80/TCP 80+ TCP 443/Selected Ports - Narrows down the tor redirection rule to destination port/s of interest. 
  
-**Custom Configuration**: Define here advanced parameters defined in the official Tor documentation.\\+ \\ 
 + 
 +**Only resolve .onion/.exit domains:**  If this is enabled, only .onion domains will be redirected towards the Tor network. Please Note that you must also enable the ''Resolve .onion using Tor''  (assuming Tor is enabled) option in the [[advanced-dhcpdns|DHCP/DNS/TFTP]] menu. 
 + 
 +**Redirect all users from:  **Here, you can specify the source LANs or client IP addresses which will be be permitted to use Tor. 
 + 
 +  * LANx - Allows you to choose specific subnets whose client devices can access Tor sites. 
 +  * Selected IPs - This option lets you specify only certain IP addresses to be allowed to access Tor sites. 
 + 
 +**Redirect TCP Ports:**  Narrows down the Tor redirection rule to destination port/s of interest. 
 + 
 +  * HTTP only (TCP 80) 
 +  * HTTP + HTTPS (TCP 80 + TCP 443) 
 +  * Selected Ports 
 + 
 + \\ 
 + 
 +**Custom Configuration:**  Here, you can define custom/advanced parameters, as found in the official [[https://www.torproject.org/|Tor Documentation]].\\ 
 + 
 + 
 +===== TOR Notes and Troubleshooting ===== 
 + 
 +Warning! If your router has 32MB of RAM or less, you must use swap space on permanent storage to ensure proper functioning.
  
-===== TOR Notes =====+ \\
  
-Warning! If your router has only 32MB of RAM, you'll have to use swap space on permanent storage for proper functioning.+ \\
  
  
advanced-tor.1643223687.txt.gz · Last modified: 2022/01/26 19:01 by rs232