What Is a Tor Directory Authority?

A Tor directory authority is a specialized, highly trusted server responsible for maintaining an accurate and up-to-date list of all active relays in the Tor network. This article explains the role of directory authorities, how they generate network consensus, why they are essential for user privacy and security, and how the system prevents malicious actors from hijacking traffic routing.

The Role of Directory Authorities

The Tor network relies on thousands of volunteer-run relays to bounce encrypted internet traffic and hide user identities. For a Tor client (such as the Tor Browser) to build a multi-hop circuit through the network, it must know which relays exist, their IP addresses, their cryptographic keys, and their current operational status.

Instead of clients querying thousands of individual relays directly, a small group of trusted servers—known as directory authorities—tracks, validates, and publishes this information.

How the Consensus Mechanism Works

Directory authorities operate collectively rather than independently to avoid single points of failure and prevent centralized control. They continuously establish network state through a process called consensus generation:

1. Relay Registration: New and existing relays periodically send status descriptors (containing their bandwidth capacity, uptime, public keys, and exit policies) to the directory authorities.
2. Measurement and Testing: The authorities independently test each relay to verify its reachability, measure its bandwidth capacity, and check for malicious behavior.
3. Voting: Once per hour, each directory authority creates a “vote”—its own assessment of the current state of the network.
4. Publishing the Consensus: The authorities exchange their votes, calculate a majority agreement, and cryptographically sign a unified document called the consensus.

Tor clients download this consensus document once per hour, using it as a verified map to build secure connection pathways across the network.

Key Functions and Flags

Directory authorities assign specific flags to relays in the consensus based on performance and capabilities:

• Guard: Relays with high bandwidth and uptime, suitable as the first hop in a circuit.
• Exit: Relays permitted to forward traffic out to the open internet.
• Fast / Stable: Indicates high-speed and reliable relays.
• BadExit: Assigned to relays observed modifying or intercepting unencrypted traffic, preventing clients from routing through them as exit nodes.

Security and Decentralization

There are currently nine active semi-independent directory authorities distributed across various geographical locations and jurisdictions, operated by trusted individuals and organizations within the Tor community.

Because directory authorities rely on a majority vote, the network remains operational even if several authorities go offline. Furthermore, an attacker would need to compromise a majority of these authorities simultaneously to manipulate the network consensus, making the system resilient against targeted attacks and censorship.