Tor Project

Tor Project: Why Authoritarian States Block Anonymity Networks

What Tor Project Is

The Tor Project is a nonprofit organization that maintains and develops Tor, a free, open-source anonymity network launched in 2002. Originally developed by the US Naval Research Laboratory, Tor became a public tool in the mid-2000s when the Naval Lab released it to civilian use. Today, the Tor Project is a US-registered 501(c)(3) nonprofit with a distributed team of developers, researchers, and volunteers. The network has approximately 2-3 million daily users globally, though exact numbers remain uncertain due to Tor's design. Users include journalists, activists, privacy advocates, law enforcement researchers, and individuals in censored regions seeking unrestricted internet access.

Why It's Censored

Tor is blocked in China because it directly undermines the state's information control apparatus. The Chinese government, through the Great Firewall administered by the Ministry of Public Security and in coordination with the Cyberspace Administration of China (CAC), restricts Tor access to prevent circumvention of content filtering and surveillance. Chinese law criminalizes unauthorized VPN use under regulations issued in 2017, and while Tor isn't explicitly named in legislation, it falls under this enforcement umbrella.

Iran has similarly prioritized Tor blocking, particularly following the 2009 Green Movement protests when activists used Tor to bypass filtering. The Iranian government, through its internet regulator MCCI (Ministry of Communications and Information Technology), categorizes Tor as a circumvention tool and actively blocks it alongside commercial VPN services. During periods of civil unrest, blocking intensifies.

Belarusian authorities blocked Tor access following the 2020 presidential election protests, when opposition movements relied on anonymity tools. The blocking was implemented at the ISP level, affecting all major state-controlled internet providers.

Technical Blocking Methods

China employs sophisticated deep packet inspection (DPI) to identify and block Tor traffic at the protocol level. The Great Firewall inspects packet signatures and recognizes TLS handshakes characteristic of Tor bridges and relays. Additionally, China maintains a growing blocklist of known Tor relay IP addresses, blocking them at the backbone level. DNS-based blocking supplements these methods.

Iran uses a combination of IP-based blocking for known Tor entry nodes and DPI-based filtering that detects Tor traffic patterns even when relay lists are updated. The blocking is less consistent than China's, suggesting some reliance on IP lists rather than pure protocol analysis.

Belarusian ISPs implemented IP-range blocking of Tor directory servers and known entry nodes, a cruder but effective method during protest periods.

User Workarounds

Users in censored regions typically employ Tor bridges—unlisted Tor relays that serve as entry points to the network, making it harder for authorities to maintain blocklists. The Tor Project distributes bridges through its website, email, and integrated bridge-distribution tools built into Tor Browser.

Pluggable transports like obfs4 and meek further obfuscate Tor traffic to evade DPI detection. These tools wrap Tor traffic in innocuous-looking protocols, complicating identification. VPN-aware users combine Tor with circumvention tools to create layered defenses, though this adds latency.

Alternatives

I2P (Invisible Internet Project) offers similar anonymity but with lower adoption and different threat modeling. It is less aggressively blocked than Tor in most regions, though less documented in academic security research.

JonDoNym operates a smaller anonymity network with a privacy-focused service model. It is also blocked in China but less comprehensively than Tor.

Outlook

Restrictions on Tor are tightening, not easing. China's DPI capabilities continue improving, making bridges less reliable. Iran's blocking remains volatile, tightening during political instability. Few signals suggest any relaxation. As censorship infrastructure matures globally, Tor's accessibility in restricted regions will likely deteriorate unless the Tor Project develops faster obfuscation technologies. The arms race between circumvention and censorship shows no signs of resolution.