The Tor manual says:

TunnelDirConns 0|1

If non-zero, when a directory server we contact supports it, we will build a one-hop circuit and make an encrypted connection via its ORPort. (Default: 1)

Why only one hop? Why not a regular three hop circuit?


1 Answer 1


No reason to be secret that you're getting the directory.

The only thing this tells people looking at you is that you just turned on Tor. But they already knew that because... You just turned on Tor

  • 3
    If there is no reason to hide the connection to the directory, why TunnelDirConns is set to 1 by default?
    – adrelanos
    Oct 3, 2013 at 3:44
  • @adrelanos Look at the description again; TunnelDirConns is set to 1 which means it will build a one-hop circuit (aka nothing to hide).
    – user5
    Oct 3, 2013 at 11:10
  • 3
    TunnelDirConns 0: Tor client -> directory server.
    – adrelanos
    Oct 3, 2013 at 15:42
  • 3
    TunnelDirConns 1: Tor client -> one relay -> directory server.
    – adrelanos
    Oct 3, 2013 at 15:43
  • 4
    If there is nothing to hide, why "TunnelDirConns 0" isn't the default? Why not connect to a directory server? Why is "TunnelDirConns 1" the default, why is there one relay in between the Tor client and the directory server? (I am not advocating any change of default, just want to understand the ideas behind it.)
    – adrelanos
    Oct 3, 2013 at 15:48

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .