Run a Tor relay on an offshore no-KYC VPS

Why an offshore no-KYC VPS for a relay

A Tor relay generates unusual traffic patterns and, if you run an exit, occasional abuse mail. Many mainstream hosts quietly forbid it. A privacy-first offshore host does the opposite — relays are a welcome, expected use case, the connection is not tied to your identity, and the jurisdiction is chosen for tolerance rather than convenience. That combination is exactly what a relay operator wants: somewhere the relay will not be pulled the first time an automated complaint arrives, run by someone who cannot be pressured to unmask you because they never collected who you are.

Middle relay, guard, bridge or exit

Pick the role by how much attention you want. A middle relay or guard only ever talks to other Tor nodes, generates essentially zero abuse mail, and is the safest first relay. A bridge is an unlisted entry point that helps users in censored countries reach Tor — high impact, low noise. An exit carries users’ traffic to the open internet and draws the most abuse reports, so run one only on a host that explicitly permits exits and in a jurisdiction you understand.

Sizing and bandwidth

A relay is bandwidth-hungry, not CPU-hungry. What matters is a generous or unmetered transfer allowance and steady throughput; a modest 1–2 vCPU plan handles a busy relay as long as the network pipe is real. Set a RelayBandwidthRate you are comfortable donating, and let the relay warm up — Tor ramps traffic to a new relay over days as it earns trust.

Keeping the relay unlinked from you

The host holds no identity; keep it that way. Pay in Monero, sign up with an alias, and administer the box over Tor or a VPN. Use a role account for the relay, keep the ContactInfo in your torrc pseudonymous (a dedicated alias email, not your real one), and do not co-locate the relay with services that identify you. A relay is public infrastructure by design, but the operator behind it does not have to be.

Step by step

1. 01

   Deploy an offshore no-KYC VPS

   Choose a plan with generous bandwidth in a tolerant jurisdiction, and pay in crypto — no ID, no card. Debian or Ubuntu is a clean base.

2. 02

   Install Tor from the official repository

   Add the Tor Project’s repo and install the tor package so you get timely updates, rather than a stale distro version.

3. 03

   Write your torrc

   Set ORPort, a pseudonymous Nickname and ContactInfo, your RelayBandwidthRate, and — for a middle relay — ExitRelay 0. For a bridge, enable the bridge options instead.

4. 04

   Harden and start

   Keys-only SSH, a firewall allowing the ORPort, and unattended security updates. Start Tor, then watch it with Nyx as it ramps up over the first days.