Finland VPS for v3 Onion Hidden Services

Finland has unusually high Tor guard-relay density per capita, which matters for onion services because the rendezvous circuit involves both client-side and service-side guards. When the service side runs in Finland its local guards have low cross-jurisdiction hop counts to common rendezvous points in Sweden, Germany, and the Netherlands.

Empirically, onion circuits from a North American Tor Browser to a Helsinki v3 onion build in 3 to 6 seconds and stabilize at 250 to 450 ms per request. This puts Finland on par with Iceland for first-byte latency despite serving very different jurisdictional profiles.

Our base template enables Vanguards-lite protection by default and routes the application via unix socket:

HiddenServiceDir /var/lib/tor/hs_v3/
HiddenServicePort 443 unix:/run/onion-tls.sock
HiddenServiceVersion 3
HiddenServiceEnableIntroDoSDefense 1
HiddenServiceNumIntroductionPoints 4
# Vanguards-lite via vanguards package
ControlPort 127.0.0.1:9051
CookieAuthentication 1

The vanguards package consumes the control port and rotates layer-2 and layer-3 guards to defend against guard-discovery attacks documented in proposal 247. For high-value onions in Finland this is the default; we install vanguards via the welcome script.

Finland's data protection regime follows GDPR baseline plus the national Information Society Code, which constrains hosting-provider disclosure to court orders only. Mass surveillance authority for onion services does not exist because the service is not identifiable as a Finnish subscriber from network metadata. Operators who care about the EU legal envelope without the surveillance load of Germany or France pick Finland.

Provisioning is 10 to 15 minutes after XMR or BTC confirmation. Vanguards is installed on request. The welcome guide includes example HiddenServiceExportCircuitID configurations for operators who want to correlate Tor circuit IDs with application logs (useful for abuse-pattern detection on legitimate services).

See also: Tor hosting parent, Vanguards protection, Iceland v3 onions, middle relay hosting Finland, exit relay hosting Finland.