My question is about how TOR handles routing of traffic. Here's the situation: User has laptop1 and server1 on a LAN. The server runs a hidden service (say a webserver) sharing over TOR only, i.e. open to localhost only, at xxyyzzaabbcc.onion. The server allows TOR proxy connections from the LAN.

If the user points configures his laptop to use server1:9050 as a proxy and navigates to xxyyzzaabbcc.onion, does the local TOR instance on server 1 recognize that traffic as local and simply forward the request to localhost, or does the traffic first go out over the TOR network, then back to server1's localhost to get to the webserver?

Put another way, if someone on the LAN uses server1's proxy to access that proxy's hidden service, does the traffic stay local?

1 Answer 1


Even if the laptop and the server with the onion service were on the same network. If you connect to the onion service from the laptop, it would still go out to the Tor network, and then back in as if it were someone else. It is not aware of local traffic.

Though this might seem like wasted bandwidth, this is a good thing because it protects your anonymity by always requiring connections through Tor and not through some shortcut local connection that can be monitored without the security of the Tor network.

  • OK, that's sort of what I figured, but I was unable to find any documentation to that effect. Although one could argue that in my example traffic that is essentially local to the server itself, similar to a user on the server accessing a service on the server, and that there is an arguable decrease in security by traffic going out through TOR nodes and returning because it increases the attack surface of the traffic.
    – Mike
    Commented Feb 17, 2020 at 22:29
  • This is confirmed by the guys over in the #tor IRC channel
    – Mike
    Commented Feb 18, 2020 at 1:11

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .