mstfknn/tor-proxy repository overview

⁠tor-proxy

A lightweight, privacy-focused proxy server using Tor network.

⁠Quick Start

docker pull mstfknn/tor-proxy
docker run -d -p 9150:9150 -p 8853:5353/udp mstfknn/tor-proxy

⁠Features

• Routes traffic through the Tor network for anonymity
• Lightweight and easy to deploy
• SOCKS5 proxy on port 9150
• DNS over Tor on port 5353 (mapped to host 8853)
• Configurable via environment variables
• Tor Bridge support via -bridge tags (obfs4, meek)
• Exit node country selection
• Built-in healthcheck
• Runs as non-root user
• Signed container images (cosign)

⁠Environment Variables

⁠Usage Examples

⁠Basic

docker run -d -p 9150:9150 mstfknn/tor-proxy:debian

⁠With country selection

docker run -d -p 9150:9150 \
  -e EXIT_NODES="{US},{GB}" \
  -e STRICT_NODES=1 \
  mstfknn/tor-proxy:debian

⁠With bridge (censored networks)

Use the -bridge tagged images which include obfs4proxy:

docker run -d -p 9150:9150 \
  -e USE_BRIDGE=true \
  -e BRIDGE_TYPE=obfs4 \
  -e BRIDGE_LINES="obfs4 1.2.3.4:443 FINGERPRINT cert=... iat-mode=0" \
  mstfknn/tor-proxy:debian-bridge

⁠With persistent data

docker run -d -p 9150:9150 \
  -v tor-data:/var/lib/tor \
  mstfknn/tor-proxy:debian

⁠Multi-Instance Load Balancing

Run multiple Tor instances behind HAProxy for different exit IPs per request:

docker compose -f docker-compose.multi.yml up -d

Client → :9150 → HAProxy → tor-1 (circuit A)
                          → tor-2 (circuit B)
                          → tor-3 (circuit C)

No additional image build is required — it uses the pre-built mstfknn/tor-proxy:debian image and the official haproxy:alpine image. See GitHub repo⁠ for docker-compose.multi.yml and haproxy.cfg.

⁠Testing

Configure your application to use the SOCKS5 proxy at localhost:9150 and verify your IP:

curl --socks5-hostname localhost:9150 https://check.torproject.org/api/ip

⁠Available Tags

⁠GitHub

https://github.com/mstfknn/tor-proxy⁠