Can a Tor Circuit Be Longer Than Three Hops?

While standard Tor connections to regular websites use a default three-hop circuit, Tor circuits can and often do exceed three hops. By default, reaching an Onion Service (.onion site) uses a six-hop path, and specialized software configurations or custom builds can create even longer chains. While increasing hop counts is technically possible, standard internet browsing relies on three hops because it offers the optimal balance between anonymity, latency, and network performance.

Standard Tor Circuit: 3 Hops

For ordinary web browsing (accessing clear-web sites), Tor routes traffic through three distinct relays: 1. Guard/Entry Node: Knows your IP address but not your final destination. 2. Middle Relay: Passes traffic between the Guard and Exit node, knowing neither the original IP nor the destination. 3. Exit Node: Connects to the final destination, knowing where the traffic is going, but not who sent it.

This three-relay structure is sufficient to prevent any single relay from knowing both the sender’s identity and the destination.

Onion Services: 6-Hop Circuits

When connecting to a Tor Onion Service, the circuit naturally extends to six hops through a process called Rendezvous routing: * The Client Side (3 Hops): Your client builds a three-hop path to a mutually agreed-upon “Rendezvous Point.” * The Service Side (3 Hops): The Onion Service independently builds its own three-hop path to the same Rendezvous Point.

When both circuits connect at the Rendezvous Point, the total end-to-end path spans six relays. This design protects the anonymity and physical location of both the visitor and the service host.

Custom and Extended Circuits

Tor’s source code and configuration tools allow developers and advanced users to build custom paths with more than three hops. However, the Tor Project discourages manually adding extra relays for general browsing.

Adding more hops introduces significant latency and increases connection failure rates without providing meaningful security benefits. Furthermore, longer paths can make users more susceptible to specific traffic-correlation attacks, as an adversary controlling multiple nodes across the wider network has more opportunities to observe packet patterns.