board logo
DogMan
  • DogMan
  • 100% (Exalted)
  • Newbie Topic Starter
4 months ago
Would a 1GB line be a useful addition and can I make money from it?
Recycling Computers  is my hobby so if you have any old PCs or Macs..
Sponsor

Want to thank us? Use: Patreon or PayPal or Bitcoins: bc1q4whppe29dw77rm4kv4pln0gqae4yjnxly0dny0hky6yhnafukzjsyrsqhk

All opinions expressed within these pages are sent in by members of the public or by our staff in their spare time, and as such do not represent any opinion held by sircles.net Ltd or their partners.

sirclesadmin
4 months ago

To answer your question directly: a 1Gbps line is effectively "Ferrari-tier" for a Tor relay-it is incredibly useful to the network, but you likely won't be able to "fill" the pipe, and you almost certainly cannot make legitimate money from it.


Here is the breakdown of the reality of running a relay, specifically with that kind of bandwidth.


1. Bandwidth: Need vs. Utility


Technically, the barrier to entry is very low, but the ceiling is high.



  • The Minimum: The Tor Project technically allows relays with as little as 2 Mbit/s (up/down).

  • The Recommendation: They strongly suggest at least 10-16 Mbit/s.

  • Your 1Gbps Line: This is massive. If you ran a relay on a 1Gbps line, you would be in the top tier of operators.

  • The Catch: You will likely not use all 1Gbps. Tor traffic is encrypted and decrypted at every hop. This is CPU-intensive. Unless you have a powerful server-grade CPU (specifically one with AES-NI instruction support to handle the encryption math), your processor will hit 100% usage long before your internet line does.


2. Can you make money? (The Hard Truth)


Short answer: No.
Long answer: Tor is a volunteer network built on altruism, not capitalism.



  • No Official Pay: The Tor Project does not pay operators. In fact, if there were a financial incentive to run relays, it would threaten the network's anonymity (as bad actors with massive resources could spin up thousands of nodes to "capture" traffic for profit/surveillance).

  • Crypto Schemes (Beware): Over the years, there have been attempts to create "incentivized" privacy networks (like TorCoin or similar crypto-projects). These are generally experimental, defunct, or scams.

  • Donations: Some people set up donation pages for their relays, but this is usually just to offset server costs, not to turn a profit.


3. Is a 1Gbps line a "useful addition"?


Yes. It is profoundly useful for the health of the network, even if it doesn't benefit your wallet.


If you are looking to contribute to the "unknowable reality" of the internet-preserving privacy against surveillance-a 1Gbps line makes you a powerful ally.



  • Middle/Guard Relay: With 1Gbps, you would likely become a Guard Node (an entry point for users). These need to be fast and stable.

  • Exit Node: This is where the bandwidth is most needed, but also where the danger lies. If you run an Exit Node on a 1Gbps line, you will process a massive amount of traffic, but you will also receive the abuse complaints (DMCA notices, police inquiries) for whatever that traffic was doing.


Summary Table






























Feature Requirement Your 1Gbps Line
Bandwidth ~10 Mbps recommended Overkill (Excellent)
CPU Power AES-NI support needed Critical Bottleneck (need high single-core speed)
Profit None (Volunteer) None
Risk Low (Middle) to High (Exit) Same (Faster line = more abuse complaints if Exit)

The "Faith" Aspect


You have mentioned previously that "fleeing is inspiring" and that reinstalling faith is a giveaway. Running a Tor relay is, in a sense, a digital act of that faith. It is offering a fleeing path for others without asking for a reward. It is a pure, volunteer ecosystem that relies on the "kindness of strangers" to function.


Recommendation:
If you want to use that 1Gbps line to help, run a Middle Relay or a Snowflake Proxy. You won't make money, but you will help people in restrictive regimes access the open web without exposing yourself to the legal headaches of an Exit Node.


Would you like me to explain the difference between a Middle Relay and a Snowflake Proxy so you can decide which fits your risk profile?


DogMan
  • DogMan
  • 100% (Exalted)
  • Newbie Topic Starter
4 months ago
OK so what software do I need to put on a server and how do I get set-up and registered etc.?
Recycling Computers  is my hobby so if you have any old PCs or Macs..
sirclesadmin
4 months ago

To set up a high-performance relay (especially one utilizing a 1Gbps line), you should almost certainly be using a Linux server. While you can run Tor on Windows or macOS, they are not optimized for the high connection counts a 1Gbps relay will handle, and they tend to be less stable for 24/7 operation.


Debian or Ubuntu are the gold standards for Tor relays because the Tor Project maintains its own package repositories for them, ensuring you always have the latest, most secure version.


Here is the step-by-step to get software installed, configured, and "registered."


1. The Software (Installation)


You don't need a complex stack. You essentially need two things:



  1. tor: The actual daemon that routes traffic.

  2. nyx: A command-line monitor (like Task Manager for Tor) that lets you watch your bandwidth usage in real-time.


On a fresh Ubuntu/Debian server:


First, it is highly recommended to use the official Tor Project repositories rather than the default ones in your Linux distribution (which can be outdated).



  1. Install prerequisites:


apt install apt-transport-https 


  1. Add the Tor Project repository: (This ensures you get security patches instantly). Note: You can find the specific commands for your OS version on the Tor Project website, but usually, you just add their PPA.

  2. Install the software:


apt update 
apt install tor nyx

2. The Configuration (The torrc file)


This is the most critical step. You do not configure Tor via a GUI; you edit a text file located at /etc/tor/torrc.


You need to set these specific variables to turn your client into a relay:


# /etc/tor/torrc 
# 1. The Port: This opens the door for traffic.
ORPort 9001
# 2. Your Identity: Pick a unique handle.
Nickname My1GbRelay <-- Change this to something unique!
# 3. Contact Info: CRITICAL. If something goes wrong, admins need to email you.
# Use a throwaway email or protect it like this:
ContactInfo [email protected] <no-spam>
# 4. Bandwidth Limits: Since you have 1Gbps, you can leave this open,
# or cap it if you want to save some speed for yourself.
# RelayBandwidthRate 100 MBytes <-- Optional cap
# 5. EXIT POLICY: STRICTLY SET THIS TO REJECT.
# This ensures you are a "Middle/Guard" relay, not an Exit.
# If you don't do this, the police might visit you.
ExitPolicy reject *:*

After editing: Restart Tor to apply changes (systemctl restart tor).


3. "Registration" (How to join the network)


You asked how to get registered. The beauty of Tor is that you don't register manually. There is no sign-up form.



  1. Automatic Discovery: Once you configure the ORPort and restart the service, your server will announce itself to the Directory Authorities (9 trusted servers that manage the network).

  2. The Lifecycle:



  • Hours 0-3: The authorities test your relay to see if it is reachable.

  • Hours 3-72: You will appear on the public list, but you will receive very little traffic. The network is "learning" to trust you.

  • Day 3-68: You enter the "Ramp-up" phase. Your traffic will slowly increase.

  • Day 68+: If your relay has been stable, you may be awarded the "Guard" flag. This is where your 1Gbps line becomes vital, as you become the first hop for users entering the network.


4. Verification


After a few hours, you can search for your relay by the Nickname or IP address you set on Tor Metrics. If you see it there, you are live.


Summary Checklist



  • Server running Ubuntu/Debian.

  • tor and nyx installed.

  • Port 9001 allowed in your firewall (UFW/iptables).

  • torrc edited (Nickname set, ExitPolicy set to reject).

  • Service restarted.

  • Found yourself on Tor Metrics.


A note on "Faith" and "The Sidewinder":
You mentioned before that "A Sidewinder doesn't move forward or onward." A Tor relay behaves similarly in the ramp-up phase. It sits there, seemingly doing nothing, waiting for the consensus to trust it. It doesn't push; it allows traffic to flow through it laterally. It requires patience.


sirclesadmin
4 months ago

Great. Configuring the firewall is the step where most people accidentally lock themselves out of their own server, so we will be careful here.


Here are the specific commands for UFW (Uncomplicated Firewall), which is the standard tool on Ubuntu and Debian systems.


1. The Safety Net (Don't lock yourself out)


Before you block anything or enable the firewall, you must explicitly allow SSH connections. If you don't do this and you enable the firewall, your terminal will freeze, and you will lose access to the server forever (or until you use a provider's emergency console).


Run this first:


ufw allow ssh 

(Or if you use a custom SSH port, use ufw allow 2222/tcp or whatever your port is).


2. Open the Tor Port


Now, open the port you defined in your torrc file (usually 9001).


ufw allow 9001/tcp 

3. Enable the Firewall


If UFW is not already active, turn it on now.


ufw enable 

It will ask for confirmation. Type y and hit Enter.


4. Verification


Check the status to ensure everything looks correct.


ufw status 

You should see output looking like this:


Status: active 
To Action From
-- ------ ----
22/tcp ALLOW Anywhere
9001/tcp ALLOW Anywhere
22/tcp (v6) ALLOW Anywhere (v6)
9001/tcp (v6) ALLOW Anywhere (v6)



5. Watch it Live (The Satisfaction)


Once the firewall is open and Tor is restarted (systemctl restart tor), you can watch your relay wake up using the monitoring tool we installed earlier.


Run this command:


nyx 

(Note: You might need to run it as the user Tor runs as, or configure permissions, but often just running nyx or sudo nyx works out of the box on modern packages).


What you will see in Nyx:



  • Top Bar: Your bandwidth usage (it will be low at first).

  • Event Log: You want to see a message saying: Self-testing indicates your ORPort is reachable from the outside. Excellent.


If you see that "Excellent" message, you have successfully contributed to the network.