How Anonymity Networks Actually Work
Beneath the user-friendly surface of Tor Browser lies a sophisticated layered encryption protocol. Onion routing wraps data in three concentric encryption layers, each peeled by a successive relay in the circuit. No single node knows both the origin and destination. I2P takes a different approach with garlic routing — bundling multiple messages into a single encrypted delivery. Understanding these architectural differences is essential for choosing the right tool for a given threat model.
The darknet does not exist as a single monolith. It is a patchwork of networks, each with distinct trade-offs in latency, anonymity, and resilience.
Layer encryption visualized
Tor, I2P and Anonymity Network Deep Dives
How Tor Works: A Complete Technical Guide
Onion routing, circuit construction, directory authorities, guard node selection, and cryptographic foundations of Tor. Full deep-dive.
15 min readDarknet Infrastructure: From Tor to I2P
Comparative analysis of Tor, I2P, and other anonymizing networks powering the darknet ecosystem.
13 min read$ killall -HUP tor
$ tail -f /var/log/tor/log | grep "circuit"
# List Tor SOCKS listeners and ports
$ netstat -tlnp | grep tor
tcp 0.0.0.0:9050 0.0.0.0:* LISTEN 1423/tor
tcp 127.0.0.1:9051 0.0.0.0:* LISTEN 1423/tor
# Request new identity from Tor control port
$ echo -e "AUTHENTICATE \"\"\r\nSIGNAL NEWNYM\r\nQUIT" | nc 127.0.0.1 9051