565795/tor-gateway repository overview

⁠Lightweight multi-arch Tor gateway container with Snowflake, obfs4, WebTunnel and Privoxy.

docker run -d --name tor-gateway --restart unless-stopped \
  -p 9050:9050/tcp -p 8118:8118/tcp \
  565795/tor-gateway:latest

By default, services inside the container listen on 0.0.0.0 for 5353/9040/9050/8118. Only published ports are reachable from outside the container.

⁠🛠️ Custom Configuration

volumes:
  -v $(pwd)/custom-torrc:/etc/tor/torrc:ro

⁠⚠️ Security Notice (LAN/WAN)

By default, this container is intended to work as a LAN gateway and listens on 0.0.0.0 for:

• 5353 (DNS over Tor)
• 9040 (Tor TransPort)
• 9050 (SOCKS5)
• 8118 (Privoxy HTTP proxy)

This is intentional for local-network usage.

Do not expose these ports to the Internet (WAN).
You must enforce firewall rules to allow access only from trusted LAN subnets and block all WAN access.

Minimum requirement:

• Allow: trusted LAN ranges only
• Deny: all WAN traffic to 5353/udp, 5353/tcp, 9040/tcp, 9050/tcp, 8118/tcp

If you do not need LAN-wide access, bind ports to localhost (127.0.0.1) instead.