Tor behind a server

Jason.nix · 08-21-2023, 05:34 AM

Hello,
Is it possible to put the Tor proxy behind on another server?
Something like:

Code:

Tor Server ---> Another Server --> Internet

You can protect an Apache web server by reverse proxy. For this scenario, should I use port forwarding?

Thank you.

jayjwa · 08-21-2023, 11:28 AM

You're probably going to have to forward some ports, too. https://tor.stackexchange.com/questi...ind-http-proxy

Jason.nix · 08-29-2023, 02:12 AM

Quote:

Originally Posted by jayjwa

You're probably going to have to forward some ports, too. https://tor.stackexchange.com/questi...ind-http-proxy

Hello,
Thank you so much for your reply.
But, Another Server is just a normal Linux box and not an HTTP or HTTPS server. Should I set up such a server?

Turbocapitalist · 08-29-2023, 03:03 AM

Quote:

Originally Posted by Jason.nix

Hello,
Is it possible to put the Tor proxy behind on another server?

Yes. If you are using Tor to provide an Onion service, no special networking or port forwarding is needed. If you are not planning to provide an Onion service, then please provide a little more information about your planned use-case.

Jason.nix · 09-05-2023, 05:17 AM

Quote:

Originally Posted by Turbocapitalist

Yes. If you are using Tor to provide an Onion service, no special networking or port forwarding is needed. If you are not planning to provide an Onion service, then please provide a little more information about your planned use-case.

Hello,
Thank you so much for your reply.
What is the usage of Reverse proxy? You can hide the existence and characteristics of an origin server or servers.
I want to upgrade the security of the Tor server by placing it behind another server. Instead of the Tor server being directly connected to the internet, it has to go through another server to connect to the internet:

Code:

Tor Server ---> Intermediate Server ---> Internet

What should be the intermediate server configuration?

Turbocapitalist · 09-05-2023, 01:48 PM

Quote:

Originally Posted by Jason.nix

What should be the intermediate server configuration?

The Intermediate server only needs to allow outgoing Internet connections from the system with Tor. Incoming new connections, like for a normal server, are not needed.

Or if you have something more complicated in mind, please elaborate.

Jason.nix · 09-08-2023, 05:44 AM

Quote:

Originally Posted by Turbocapitalist

The Intermediate server only needs to allow outgoing Internet connections from the system with Tor. Incoming new connections, like for a normal server, are not needed.

Or if you have something more complicated in mind, please elaborate.

Hello,
Thank you so much for your reply.
So, an HTTP server like TinyProxy or Squid-cache is not necessary?
How can Tor use the internet of this intermediate server? Via iptables?

Turbocapitalist · 09-08-2023, 07:33 AM

I presume the intermediate server has been set up to relay connections from the network interface connected to the LAN on which the Tor server is installed. If so, then nothing further needs to be done. If not, then forwarding needs to be set up on the intermediate server using NFTables (iptables is being retired) and the details of that depend a lot on the details of your outgoing network connection.

Jason.nix · 09-16-2023, 12:29 PM

Quote:

Originally Posted by Turbocapitalist

I presume the intermediate server has been set up to relay connections from the network interface connected to the LAN on which the Tor server is installed. If so, then nothing further needs to be done. If not, then forwarding needs to be set up on the intermediate server using NFTables (iptables is being retired) and the details of that depend a lot on the details of your outgoing network connection.

Hello,
Thank you so much for your reply.
Why not TinyProxy or Squid-cache?

Turbocapitalist · 09-16-2023, 12:47 PM

Quote:

Originally Posted by Jason.nix

Why not TinyProxy or Squid-cache?

Because they are HTTP / HTTPS proxies and Tor is a SOCKS proxy.

With enough effort you could set up Squid so that it exits through Tor, but that is going to be of dubious benefit. What are you trying to do?