The NordBastion polar-bear mascot in a Nordic library at night, leaning over a long oak reading table strewn with open dictionaries and PGP-signed papers under aurora-blue lamplight
Glossary entry · Privacy network

Tor The Onion Router

Three-hop encrypted relays, run by volunteers, so no single party — including us — sees both your IP and your destination.

परिभाषा
Plain English

एक स्वयंसेवक-संचालित anonymity overlay network जो क्लाइंट ट्रैफ़िक को एन्क्रिप्शन की तीन परतों में लपेटता है और इसे तीन स्वतंत्र relays — guard, middle, exit — के माध्यम से रूट करता है, ताकि कोई भी एकल नोड उपयोगकर्ता का IP address और गंतव्य दोनों न देख सके। The Tor Project, एक US 501(c)(3) गैर-लाभकारी संस्था, द्वारा अनुरक्षित, जिसकी शोध जड़ें 1990 के दशक के मध्य में US Naval Research Laboratory में हैं।

Why it matters at NordBastion

Tor is the network we tested signup against.

Most hosting providers do not actually want Tor traffic, even the ones that claim to be privacy-friendly. The minute a request arrives from a known exit relay, the provider's upstream WAF — Cloudflare, AWS Shield, Imperva — fires a captcha, a rate-limit, or an outright block. The customer never sees the signup form. A "privacy host" you cannot reach privately is not a privacy host.

We treat Tor as a first-class transport. The marketing site, the customer panel, the JSON API and the status endpoint all answer requests from exit relays without challenge pages, without invisible reCAPTCHA, without "your connection is unusual" interstitials. The signup form takes the same email-plus-password it would take from any other browser. Payment in Monero clears the same way.

There is a quiet engineering cost to this: we have to do abuse mitigation in-application instead of at the edge, and we have to write our own rate-limit logic instead of letting a third party do it. We consider that cost the price of admission. The doctrine pages explain the trade-off in full; this glossary entry exists so that "Tor" is not a fuzzy idea when you encounter it elsewhere on the site.

FAQ · Tor

The questions people actually ask.

What does Tor stand for?

Tor is short for "The Onion Router". The onion metaphor refers to the layered encryption applied to every packet: the client wraps the message in three nested encryption layers, and each relay in the circuit peels off exactly one layer before forwarding the result, so no single relay can simultaneously see the source, the destination and the cleartext.

Is using Tor legal?

In the overwhelming majority of jurisdictions — including the United States, Canada, the United Kingdom, the European Union member states, Japan, Australia and most of South America — using Tor is fully legal. A handful of authoritarian states actively block or criminalise it (China, Iran, Turkmenistan, Belarus). Operating an exit relay is a separate question with its own legal nuances, and is not something a typical VPS customer needs to worry about.

क्या Tor सर्किट वास्तव में मेरी पहचान छुपाता है?

It hides the network-layer link between your IP address and the site you visit, which is the dominant identifier most adversaries rely on. It does not hide application-layer identifiers — if you log into an account, paste your real email address or run a fingerprintable browser, the circuit's anonymity is moot. Tor Browser ships with extensive fingerprinting countermeasures for exactly this reason.

क्या मैं Tor के माध्यम से NordBastion तक पहुँच सकता हूँ?

Yes. The marketing site, the customer panel, the API and the status page all serve cleanly over Tor; signup and Monero payment work without any captcha gauntlet or "your connection looks suspicious" interstitial. We treat Tor traffic as first-class traffic, because for a no-KYC host that is the entire point.