How Many Middle Relays in a Tor Circuit?

A standard Tor circuit designed for regular internet browsing contains exactly one middle relay. To protect user privacy while maintaining usable connection speeds, the Tor network routes traffic through a fixed path of three distinct nodes: the Guard (Entry) relay, the Middle relay, and the Exit relay. This article covers the specific role of the single middle relay, why additional middle relays are generally not used, and how this architecture ensures anonymity.

The Structure of a Standard Tor Circuit

When a user connects to the internet via the Tor Browser, the client builds a three-hop circuit:

1. Guard (Entry) Relay: The first node in the circuit. It knows the user’s real IP address but does not know the final destination or the unencrypted content of the traffic.
2. Middle Relay: The second node in the circuit. It receives encrypted traffic from the Guard relay and forwards it to the Exit relay. It knows neither the user’s original IP address nor the final destination.
3. Exit Relay: The third and final node. It decrypts the outermost layer of encryption and forwards the request to the destination server on the open web. It knows the destination, but it does not know who initiated the connection.

The Purpose of a Single Middle Relay

The primary function of the middle relay is to completely separate the entry point from the exit point. Without a middle relay (a two-hop circuit), the entry node and exit node would be directly connected, making traffic correlation attacks much easier for an adversary observing both ends.

By placing exactly one middle relay between the guard and exit nodes, neither endpoint can identify the other, effectively breaking the link between the origin IP address and the destination server.

Why Tor Uses Only One Middle Relay

While adding multiple middle relays might seem like an intuitive way to increase security, Tor defaults to just one for two practical reasons:

• Performance and Latency: Each additional relay introduces network latency, processing overhead, and cryptographic computations. Adding more middle relays significantly slows down browsing speeds.
• Diminishing Security Returns: Mathematical and security models show that adding a second or third middle relay provides negligible protection against standard traffic correlation attacks compared to the performance penalty it imposes.

Exceptions to the Standard Circuit

While a standard circuit to a public website uses exactly one middle relay, specialized connections may use more:

• Onion Services (.onion sites): Connections to Tor hidden services utilize rendezvous points, effectively joining two three-hop circuits together. This results in a 6-hop path that incorporates multiple middle relays to protect the anonymity of both the client and the service host.