Iceland VPS for v3 Onion Hidden Services

Iceland is the only Western jurisdiction where the press shield extends to source identity by constitutional principle, not just statute. For SecureDrop, leak platforms, and v3 onions that publish primary documents, this is the practical legal layer that complements Tor's cryptographic anonymity. Combined with the absence of intelligence-sharing obligations beyond NATO baseline, Iceland is the highest-trust onion jurisdiction we offer.

Our Reykjavik POP has direct uplink to FARICE-1, GREENLAND CONNECT, and IRIS, so latency to Tor guards in continental Europe stays under 30 ms despite the physical distance. Onion circuit build times on Iceland v3 services are typically 4 to 7 seconds, comparable to Romania.

Our Iceland VPS ship with this torrc fragment as a starting template:

HiddenServiceDir /var/lib/tor/hs_v3/
HiddenServicePort 80 unix:/run/onion.sock
HiddenServiceVersion 3
HiddenServiceEnableIntroDoSDefense 1
HiddenServiceNumIntroductionPoints 5
ClientUseIPv6 1
ORPort 9001 IPv6Only

Five introduction points instead of the default three improves availability under introduction-point flooding. Unix-socket binding makes the hidden service unreachable on any TCP interface, eliminating the most common deanonymization vector (accidental clearnet exposure during nginx upgrade).

Disk is LUKS with key in RAM only. A power cycle locks the volume; recovery requires the operator to re-enter the passphrase over SSH. We do not hold the passphrase.

SecureDrop landing servers, journalist drop boxes, OnionShare receive-mode persistent endpoints, dissident publishing platforms, and human-rights documentation archives are typical Iceland tenants. Each gets the same hardened base image; the difference is workload.

For SecureDrop specifically, we have a separate template that includes the recommended segmentation between Source Server and Journalist Workstation. See SecureDrop hosting Iceland for that variant.

Iceland onion VPS provisions in 10 to 20 minutes after BTC or XMR confirmation. We do not require ID, phone, or even a working email if you authenticate via an onion mail address. The welcome message includes the SSH endpoint, the LUKS unlock instructions, and a torrc-snippets file with five common v3 configurations (single hop disabled, OnionBalance backend, client-auth required, vanity prefix retention, multiple HS on one daemon).

See also: Tor hosting overview, SecureDrop Iceland, guard relay Iceland, v3 hosting Romania, Vanguards protection VPS.