Skip to content

[feature suggestion] "--tor inside" option to run ZeroNet in the VM connected to Tor #474

@yurivict

Description

@yurivict

Currently these options are supported: --tor {disable,enable,always}.
--tor always is designed to run alongside the Tor process, and means that ZeroNet will use the Tor controller port to create the hidden service and Tor's SOCKS5 port to connect to the peers.

However, people sometimes also run Tor-connected VMs. This is actually the most secure way to connect to the Tor network, see for example the Whonix and Qubes projects. The suggested --tor inside option will work the same way as --tor always works with these exceptions:

  • NetZero will not use SOCKS5, instead it will just connect to all peers directly, and perform DNS queries directly too, dark and clear nets alike.
  • NetZero will not use the Tor controller port, instead the HS address and port will be supplied as an additional, required argument, for example --tor_hidden_service {hs1}.onion:{port1}{:{hs2}.onion:{port2}{:...}}. User will create hidden service(s) and route it/them to that port(s).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions