I would like to run an exit relay, but I don't want to deal with almost any abuse issues. So I figured to only exit to hidden services. If my understandings are right, the exit policy and the relay part of my torrc should look like this:

ExitRelay 1
ExitPolicy reject *:*

But I would also like to relay non-exit traffic, on the same machine.

Is this possible?

Or do I have any misunderstandings, for example, am I already able to be the third hop to a hidden service even if I have ExitRelay 0 ?

1 Answer 1


As onion services "live" within the network, you don't need to be an exit to relay onion service traffic.

See https://2019.www.torproject.org/docs/onion-services for details.

Exits are "only" needed for exiting to the clearnet.

Thank you for running any relay.

  • Thank you for answering my main question. I would still like to know that if I run an "actual" exit relay, do I relay any kind of non-exit traffic? My question might be quite unrealistic here, because exit relays are usually extremely busy just on exiting since there are relatively few of them.
    – noarch
    Nov 14, 2020 at 19:11
  • As far as I know, an exit is just a normal relay which happens to have the exit flag (and so, permitting exit rules) as well.
    – silverstar
    Nov 15, 2020 at 8:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.