Can You Run a Tor Middle Relay from Home?

Setting up a Tor middle relay from a home network is entirely possible and widely practiced by privacy advocates around the world. Unlike exit nodes, middle and guard relays only pass encrypted traffic between other Tor nodes, meaning your home IP address will never be seen as the source of a user’s web browsing activity. This guide explains how home middle relays work, the hardware and bandwidth requirements, the safety implications, and the practical considerations before you begin.

How a Tor Middle Relay Works

The Tor network relies on three types of nodes to route traffic: Guard (entry), Middle, and Exit relays. When a user connects to Tor, their traffic passes through a guard node, then a middle node, and finally an exit node before reaching its destination.

A middle relay only receives encrypted packets from one Tor relay and forwards them to another. Because it never interacts directly with the destination website or service, it carries virtually none of the legal and abuse risks associated with running an exit node.

Requirements for Running a Home Relay

To run a middle relay from home, you need:

  1. A Dedicated Device or Server: A low-power device like a Raspberry Pi, an old laptop, or a home server running a Unix-based operating system (such as Debian or Ubuntu) is ideal. The device should stay powered on 24/7.
  2. Sufficient Bandwidth: The Tor Project recommends a minimum sustained bandwidth of at least 16 Mbit/s (2 MB/s) upload and download, though relays can function with less. An unmetered connection is crucial, as a relay can consume hundreds of gigabytes or even terabytes of data each month.
  3. Router Access for Port Forwarding: You must be able to forward the Tor onion routing port (typically TCP port 9001) from your router to the local IP address of your relay device.

Safety and ISP Considerations

Running a middle relay from home is generally safe, but there are a few important factors to consider:

Basic Setup Overview

Setting up a relay involves installing the official tor package on your chosen machine and editing the configuration file (torrc). You will need to define a nickname for your relay, specify your contact information, enable the ORPort (usually set to 9001), and explicitly disable exit functionality by setting ExitRelay 0. Once configured and started, Tor will verify its reachability and automatically register the node with the network directory.