About

Multi-container application template with Tor.

It can be useful to:

• analyze Tor censorship
• run sensitive traffic over Tor isolated from the host network
• debug C Tor configurations

Architecture

architecture-beta
    group app(cloud)[Playground]

    service isolated(internet)[Isolated] in app
    service exposed(internet)[Exposed] in app

    service tor-proxy(server)[Tor Proxy] in app
    service sniffer(server)[Sniffer] in app
    service payload(server)[Payload] in app
    service hidden-service(server)[Hidden Service] in app

    group host(server)[Host]

    service internet(internet)[Internet] in host
    service captures(disk)[Captures] in host

    isolated:T -- B:tor-proxy
    exposed:R -- L:internet
    exposed:B -- T:tor-proxy
    tor-proxy:R -- L:sniffer
    sniffer:R -- L:captures
    hidden-service:R -- L:isolated
    payload:L-- R:isolated

Containers

tor-proxy

C Tor runs as a proxy.

It exposes:

• DNS resolver at tor-proxy:53
• SOCKS5 proxy at tor-proxy:9050
• HTTP CONNECT proxy at tor-proxy:9051

sniffer

tcpdump captures all traffic within tor-proxy container. The captures get stored in captures directory.

hidden-service

nginx runs with the default configuration. It is isolated from the host and can only access isolated network with tor-proxy in it.

payload

This container contains an arbitrary payload utilizing internet access over Tor network. It is isolated from the host and can only access isolated network with tor-proxy in it.