Tor 隱藏服務 主機代管 - 部署 .onion Sites in Minutes

A Tor 隱藏服務 is a server that is only accessible through the Tor 網絡. Instead of a traditional domain name, it uses a .onion address - a 56-character string derived from the service's cryptographic key. This architecture means the server's real IP 位址 is never exposed to visitors, and visitors' IP 位址 are never exposed to the server. Both parties communicate through encrypted Tor 電路.

Version 3 onion addresses, the current standard, use Ed25519 cryptography and provide significantly stronger security than the deprecated v2 addresses. They are resistant to enumeration attacks, making it impossible for adversaries to discover hidden services by brute force. AnubizHost exclusively deploys v3 hidden services.

Hidden services are not just for anonymity - they also provide built-in end-to-end 加密 without needing a TLS certificate from a certificate authority. The .onion address itself serves as the cryptographic identity of the server, so visitors know they are connecting to the authentic service without relying on third-party trust.

AnubizHost's hidden service 主機代管 runs on 專用 hardware isolated from our clearnet infrastructure. Each server features NVMe SSD storage for fast response times, ECC RAM for data integrity, and full-disk 加密 using LUKS with keys held only in memory. If a server loses power, all data becomes cryptographically inaccessible.

We configure Tor with optimized settings for hidden service performance, including vanguard protections against guard discovery attacks, connection padding to resist traffic analysis, and carefully tuned circuit-build timeouts. These settings are based on the latest recommendations from the Tor 計畫's security team and our own operational experience.

Network isolation is enforced at the firewall level. Hidden service servers cannot make clearnet connections unless you explicitly configure them to do so. DNS resolution is disabled by default, and all outbound traffic is routed through Tor. This prevents accidental IP leaks even if an application is misconfigured.

Every hidden service 部署 includes our baseline security hardening. The operating system is stripped to essential packages only, reducing the attack surface. AppArmor profiles confine the Tor process and your web server to their minimum required permissions. Kernel hardening parameters are applied following CIS benchmark recommendations.

We 部署 automated intrusion detection using AIDE for file integrity monitoring and custom rules that watch for unauthorized modifications to your Tor configuration and onion service keys. Any unexpected changes trigger immediate alerts to our security team. We also run regular vulnerability scans against the local service stack.

Tor 隱藏服務 keys are stored in a 專用 encrypted partition with restricted filesystem permissions. Only the Tor process can read them, and they are never included in standard backups unless you explicitly request it. This ensures that even if a backup is compromised, your .onion address cannot be impersonated.

We support multiple 部署 methods for your hidden service. Upload your site via SFTP over Tor, push from a Git repository through our Tor-accessible GitLab instance, or use our API to automate deployments from your CI/CD pipeline. For static sites, simply drop your HTML files into the web root and they are instantly served over your .onion address.

Dynamic applications are fully supported. We provide pre-configured environments for PHP, Python, Node.js, Ruby, and Go. 資料庫 servers including PostgreSQL, MySQL, and MongoDB can be deployed alongside your application, all accessible only through Tor. We also support containerized deployments using Docker for complex multi-service architectures.

If you need multiple hidden services, our multi-onion 主機代管 plans let you run several .onion addresses from a single server, each with its own isolated web root and configuration. This is ideal for organizations that operate separate services for different purposes - such as a public information site alongside a secure document submission system.