3

Let's suppose I have a web server X, listening on port N for instance and configured as a Tor hidden service.

How and where is implemented its' hiddenness from public access?

3
  • torproject.org/about/overview.html.en#thesolution
    – NULLZ
    Commented May 29, 2013 at 6:31
  • 2
    The concept is pretty simple. You bind your webserver to your localhost only, so it won't accept connections from outside your computer. Then you configure Tor to connect to this server. Since Tor is installed in your computer, it will be able to connect to your webserver, but others can't. This way, your webserver will only accept connections from inside the Tor network.
    – Adi
    Commented May 29, 2013 at 6:42
  • @Adnan Ah, now it's clear for me.
    – laika
    Commented May 29, 2013 at 6:48

2 Answers 2

8

Since you found my comment helpful, I'll just write it as an answer.

The concept is pretty simple. You bind your webserver to your localhost only, so it won't accept connections from outside your computer. Then you configure Tor to connect to this server. Since Tor is installed in your computer, it will be able to connect to your webserver, but others can't. This way, your webserver will only accept connections from inside the Tor network.

For more information, have a look at how to configure a Tor hidden service.

3
  • How is exactly is the IP of the service provider hidden? What are the routing mechanism behind it?
    – mike
    Commented Jun 3, 2014 at 16:57
  • Found something useful: torproject.org/docs/hidden-services.html.en
    – mike
    Commented Jun 3, 2014 at 17:01
  • This doesn't answer how it is addressable, just how to set one up. You should explain at least the basics of the rendezvous point and introduction nodes. See security.stackexchange.com/a/23260/165253
    – forest
    Commented Jan 23, 2018 at 5:33
1

From wikipedia

Servers configured to receive inbound connections through Tor are called hidden services. Rather than revealing a server's IP address (and thus its network location), a hidden service is accessed through its onion address. The Tor network understands these addresses and can route data to and from hidden services, even those hosted behind firewalls or network address translators (NAT), while preserving the anonymity of both parties.

and

Because hidden services do not use exit nodes, they are not subject to exit node eavesdropping. There are, however, security issues involving Tor hidden services. For example, services that are reachable through Tor hidden services and the public Internet are susceptible to correlation attacks and thus not perfectly hidden. Other pitfalls include misconfigured services (e.g. identifying information included by default in web server error responses),[24] uptime and downtime statistics, intersection attacks, and user error.

Other relevant links.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .