Anonymous XMPP Server VPS With Tor Hidden Service

Both Prosody and ejabberd support binding only to localhost and exposing the XMPP ports as a Tor hidden service. We deploy hardened configurations with TLS required, no plaintext authentication, mandatory OMEMO for direct messages, and Multi-User Chat rooms gated behind invitation. The onion v3 identifier is the canonical address; clearnet exposure is optional and disabled by default.

Operators of small invite only communities benefit from the onion only configuration because it removes the need to register a domain or maintain DNS records. The onion address is shared out of band with new members through trusted channels.

Tor federated XMPP servers can talk to other onion XMPP servers without crossing clearnet at all. We support s2s federation over Tor with onion v3 contact discovery through a small bootstrap list maintained by the operator. Servers that publish only onion contacts remain invisible to passive scanners on the clearnet, and federation traffic between them is constrained to the Tor network itself.

For deployments that need partial clearnet federation, we provide split configurations: clearnet for federation with mainstream servers and onion for direct user access. Both modes can coexist on the same VPS with isolated process trees and separate TLS configurations.

XMPP operators for high risk communities benefit from anonymous hosting end to end. AnubizHost provides crypto only billing, no KYC, and pseudonymous accounts that survive years of operation. The XMPP server identity is independent of the AnubizHost account and can be rotated on operator command. The hosting layer cannot serve as a backchannel for correlation.

If the operator role passes to a new pseudonym within the community, the AnubizHost account transfers without forcing identity disclosure. The XMPP service experiences no downtime and retains its onion address, archive, and roster state through the transition.