EOTK Tor Mirror VPS for Onion Proxy Operators
The Enterprise Onion Toolkit, EOTK, turns a clearnet website into an onion mirror without modifying the upstream codebase. Major publishers from The New York Times to Facebook have used EOTK to publish onion addresses for users in censored regions. AnubizHost provides offshore VPS for EOTK deployments with anonymous billing and Tor friendly network policies.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
EOTK Setup on a Hardened Offshore VPS
EOTK runs Tor, OpenSSL, and a customized Nginx in a single repo with build scripts that emit a configuration set for one or more onion addresses. On AnubizHost VPS we deploy EOTK on Debian stable with sandboxed Tor, dedicated unprivileged users for the Nginx workers, and outbound clearnet restricted to the upstream domains being mirrored. The control panel is reachable only over the same onion to avoid clearnet management exposure.
Vanity onion v3 addresses are supported through mkp224o so the mirror can advertise a memorable prefix. EOTK rewrites absolute URLs, fixes Same Origin Policy concerns, and patches a list of well known JavaScript fingerprinting sources so the mirror behaves predictably inside Tor Browser.
Operating Multiple Mirrors From One VPS
A single VPS can host dozens of EOTK mirrors as long as upstream bandwidth and CPU permit it. Mid tier plans handle around twenty active mirrors before resource pressure becomes visible. Each mirror has its own onion address, its own log directory limited to ephemeral storage, and its own configuration block in the EOTK manifest. Mirrors can be added, removed, and rotated without disturbing peers.
The Onion-Location header can be set so that visitors arriving from clearnet are gently invited to the onion address by Tor Browser. Operators who run educational or human rights mirrors find this conversion path particularly effective when combined with a published .onion in printed materials.
Anonymity for Mirror Operators
Mirror operators in some regions face the same threat model as the publishers they mirror. AnubizHost provides crypto only billing, no KYC, and no required telemetry. We do not contact mirror operators except for service status notices. We do not aggregate operator information for marketing. If you operate mirrors on behalf of an NGO, the relationship between the funder, the operator, and the AnubizHost account can be kept entirely opaque.
Mirrors do not generate egress complaints because they only proxy on demand for users who explicitly requested the upstream content. We have rarely had to mediate abuse on EOTK deployments, but when complaints arrive we handle them through our standard offshore mediation workflow without exposing operator identity.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.