How Many Nodes Are in a Tor Circuit?

A standard Tor circuit typically consists of three nodes designed to protect user privacy through multi-layered encryption. This article provides a straightforward breakdown of how a standard Tor circuit operates, the distinct functions of the Guard, Middle, and Exit nodes, and why this three-hop configuration is the default architecture for anonymous internet browsing.

The Three-Node Architecture

When you connect to the internet using the Tor Browser, your traffic is routed through three randomized relays before reaching its final destination:

1. The Entry (Guard) Node: This is the first stop for your encrypted traffic. The entry node knows your real IP address because it receives the connection directly from your device. However, it cannot see what website you are visiting or read the contents of your traffic.
2. The Middle Node: The middle relay sits between the entry and exit nodes. It receives traffic from the entry node and forwards it to the exit node. It knows neither your real IP address nor the final destination server, serving as an essential isolation barrier between the two ends of the circuit.
3. The Exit Node: The exit node removes the final layer of Tor’s encryption and sends the request to the intended destination (e.g., a website). The website sees the IP address of the exit node rather than your personal IP address. The exit node knows the destination server, but it has no knowledge of your identity or IP address.

Why Three Nodes Are Used

The three-node model provides a balance between strong anonymity and connection speed:

• Collusion Prevention: If a circuit only used two nodes, it would be significantly easier for a single malicious actor controlling both relays to correlate the timing and size of the traffic, thereby deanonymizing the user.
• Separation of Knowledge: No single relay ever possesses both the origin IP address and the destination IP address simultaneously.
• Performance Balance: Adding more than three nodes to a standard circuit introduces severe latency and network overhead without offering meaningful improvements to privacy.

Exceptions to the Three-Node Rule

While three nodes are standard for browsing the clear web via Tor, certain scenarios use different circuit lengths:

• Onion Services (.onion sites): Connections to Tor-hidden services typically use a six-node circuit. The client builds a three-node path to a designated rendezvous point, while the hidden service builds its own three-node path to the same point.
• Bridges: When using a Tor Bridge to bypass censorship, the bridge simply replaces the standard Guard node, maintaining the total circuit length at three nodes.