A Tor controller addon that provides advanced security defenses for onion services ahead of their official Tor-core release.
Vanguards is a Tor controller addon that provides advanced security defenses for onion services, protecting them from various attacks that are not yet addressed in the main Tor software. It allows onion service operators to deploy experimental security features immediately, offering enhanced protection for high-risk services.
Onion service operators who require high security and privacy, as well as developers working with Tor-based applications like Tor Browser or OnionShare.
Developers choose Vanguards because it offers cutting-edge security protections for onion services ahead of official Tor releases, with configurable options and performance tuning for high-traffic scenarios.
Vanguards help guard you from getting vanned...
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Deploys experimental defenses ahead of Tor-core releases, allowing high-risk onion services to access cutting-edge protections immediately, as stated in the project's rapid-prototyping philosophy.
All subsystems are tunable via a configuration file, enabling custom security policies, with an example configuration file provided for detailed customization.
Supports PyPy for faster execution and parallel processing for high-traffic services, with recommendations and scripts available to enhance performance.
Provides logs with WARN and NOTICE levels for security events and heuristic detections, helping operators react to issues and tune defenses, as described in the logging section.
Setup requires running as the system Tor user, verifying git tags, and installing dependencies like Stem, which can be error-prone and time-consuming for non-experts.
Defenses are not yet integrated into Tor-core and may have false positives or require tuning, with the README noting that heuristics are still being refined and logs may indicate bugs or attacks.
Default execution may be slow for high-traffic services, necessitating additional steps like using PyPy or parallel processing, which adds to setup and maintenance complexity.