Zcash addnode Tor hidden service .onion

“…Tor developers have medium-term future plans for upgrading the cryptography of onion services, which has the side-effect of increasing onion address length to 54 characters!..”

3 Likes

All zcash (named) addnode=.onion project nodes have been upgraded to the latest release;

Zcash 1.0.8-1
Tor 0.2.9.10 or 0.3.0.5-rc

1 Like

All zcash (named) addnode=.onion project nodes have been upgraded to the latest release;

Zcash 1.0.9
Tor 0.2.9.10 or 0.3.0.7

If you use these Zcash addnode Tor hidden service .onion nodes then please consider a donation to help keep the servers online.

Cheers!

1 Like

All zcash (named) addnode=.onion project nodes have been upgraded to the latest release;

Zcash 1.0.9
Tor 0.2.9.11 or 0.3.0.8

"Source code for a new Tor release (0.3.0.8) is now available on the
website. Among other things, it fixes two issues in earlier versions
of the hidden service code that would allow an attacker to cause a
hidden service to exit with an assertion failure."

Regards,

2 Likes

An example Zcash iptables firewall for Linux cloud servers:zcash:

1 Like

@xyZcash thank you for your work!

I’m new to zcash and started a couple of days ago to run my node.
To run everything through tor I had to add a few options to my zcash.conf

onlynet=onion
dnsseed=0

I was wondering if I add all your onion urls to my config, do I still need to use dnsseed?
As it will connect to the ‘normal’ internet.

2 Likes

I should probably point out here that these configurations were originally designed for Zcash node operators to run ‘Dual Stack’ servers over Tor (in the main), allowing for Tor and clearnet connectivity - the configurations were then expanded upon per use case and for Client (only) use.

You are correct in adding dnsseed=0 for optimal privacy for Tor 1 and Zcash 1 - Proxified Zcash (example) and I will clarify settings in the original post. For ‘Dual Stack’ servers this option should be left at the default value.

" -dnsseed - Query for peer addresses via DNS lookup, if low on addresses (default: 1 unless -connect/-noconnect) "

DNS leaks with Tor are not as much as an issue as they once were. Although they do remain an issue, more so with windows.

Using onlynet=onion will enforce using only the specified addnode=.onion addresses in your zcash.conf . Thus, if said services are ever ‘offline’ then you might have connectivity issues.

Whilst only enabling connectivity with .onion addresses is the most private way to run Zcash on Tor (because the traffic never exits from the Tor network), it is perhaps a good idea to allow .exit connections from Tor .exit nodes to reach other clearnet Zcash nodes. Simply having diverse connectivity can also be good for privacy and the Zcash network as a whole.

" -onlynet= - Only connect to nodes in network (ipv4, ipv6 or onion) "

Thank you for highlighting these additions!

This is a work in progress, without a ‘one size fits all’ solution and we certainly require some much more organized documentation.

2 Likes

It is also worth noting that fewer connections are considered to be better for privacy and anonymity than more connections, in terms of the network effect.

Satoshi thought that having 8 connections was ‘optimal’ for Bitcoin P2P (in terms of the network), broadcasting transactions and user privacy etc,. Setting maxconnections= 6 (or even to 4) in your zcash.conf might be advisable for clients who are seeking increased anonymity, for example.

All zcash (named) addnode=.onion project nodes have been upgraded to the latest releases;

Zcash v1.0.10-1
Tor v0.3.0.9

Again, if you use these Zcash addnode Tor hidden service .onion nodes then please consider a donation to help keep the servers online - we will soon require capacity upgrades for some servers! :smiley:

Regards,

1 Like

“New and Improved Onion Services Will Premiere at Def Con 25”

2 Likes

Advisory notice!

To help preserve the actual privacy of all Zcash on Tor users - We are adding the following ExcludeNodes to all of our Zcash on Tor nodes until further notice;

  • https://onionpop.github.io

    $09FA8B4F665AD65D2C2A49870F1AA3BA8811E449
    $068308AD070849A71B8C1DB06C2509E82C40B908
    $335746A6DEB684FABDF3FC5835C3898F05C5A5A8
    $363F42695F2DD825DA5A4E6ABF3FBDFCFD1E9AE2
    $B6718125C43ECA2E5011B3C681BB6638617A9686
    $C6B3546CC6BCCB649FEC82D348D464554BC6323D
    $12B80ABF019354A9D25EE8BE85EB3C0AD8F7DFC1
    $DE684E6C6B7773B8BE74B4D941E4178988E15E26
    $4B1E3276137AD12DCCEBE354EA11C1E47F804F67
    $C170AE5A886C5A09D6D1CF5CF284653632EEF25D
    $A5945077E0D35729F8E2920A54BE12A0058B403E
    $0DA9BD201766EDB19F57F49F1A013A8A5432C008
    $D53793315E290D250E9AFC431A4C9068A1E53C98
    $11EAB5C9137906EF7E6A32365C4B37613698E647
    $91516595837183D9ECD1318D00723A8676F4731C
    $1A4488A367D89D0EFDA88116059FEBCACF0F508A
    $98D10461F6EDF13780D20D7E402E67F40C5ADBD9

Client nodes might choose to do the same.

2 Likes

All zcash (named) addnode=.onion project nodes have been upgraded to the latest Tor release;

Zcash v1.0.10-1
Tor v0.3.0.10-1

Some of the nodes may or may not be upgrade to Zcash v1.0.11-rc1 .

All zcash (named) addnode=.onion project nodes have been upgraded to the latest Zcash release;

Zcash v1.0.11
Tor v0.3.0.10-1

Donate some CPU mining power to the Zcash on Tor project servers here : http://zcashtorservers.zapto.org

Thanks!

1 Like

“Tor Browser Downloads Are Up in 2017”

1 Like

Our ‘Zcash on Tor’ security partner has added ‘The Grey Area’ …

All zcash (named) addnode=.onion project nodes have been upgraded to the latest Tor release;

Zcash v1.0.11
Tor v0.3.1.7

2 Likes

All zcash (named) addnode=.onion project nodes have been upgraded to the latest Zcash release;

Zcash v1.0.12
Tor v0.3.1.7

Additional : OONI Run: Let's fight internet censorship together! | The Tor Project - OONI Run: Let’s fight internet censorship together! - help test if Tor or any Zcash (related websites are blocked or restricted in your country or location!?)

Thanks!

2 Likes

“We Want You to Test Next-Gen Onion Services”

1 Like

All zcash (named) addnode=.onion project nodes have been upgraded to the latest Tor release;

Zcash v1.0.12
Tor v0.3.1.8-2

Additional : All or any Zcash on Tor servers previously located in Russia {ru} have now been relocated. This decision was taken in regards to the Russian November 1st 2017 ‘ban’ of proxies and VPN’s. See:

Zcash on Tor addnode=.onion addresses remain unaffected.

2 Likes

All zcash (named) addnode=.onion project nodes have been upgraded to the latest Tor and Zcash releases;

Zcash v1.0.13
Tor v0.3.1.9

New Nodes : addnode=zcashiyf4kxluf3x.onion and addnode=zcashwfe4x3jkz2b.onion

New Relays :

ZcashTor0in - 139.59.91.120 - $4543E40DED6BDC3E92400B1D0B9966EB709ECB64 - Bangalore, India

ZcashTor0sg - 128.199.168.99 - $86E04789EF634825CF7515156FCC8E6940928F6A - Singapore

N.B. Some, none or all of our .onion addresses have been rotated between nodes to help limit and prevent established correlation attack vectors.

Having now received our project grant from the Zcash Foundation - new high-bandwidth .exit servers will be online before mid-to-late Jan. 2018.

1 Like