Skip to content

Instantly share code, notes, and snippets.

@glamrock
Created August 25, 2014 02:17
Show Gist options
  • Save glamrock/da7fc82f2dc4b1dee4a0 to your computer and use it in GitHub Desktop.
Save glamrock/da7fc82f2dc4b1dee4a0 to your computer and use it in GitHub Desktop.
All valid torrc options
yahtzee@fagballs:~# tor --list-torrc-options
Aug 24 22:16:31.701 [notice] Tor v0.2.4.20 (git-0d50b03673670de6) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1f.
Aug 24 22:16:31.701 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning
AccountingMax
AccountingStart
Address
AllowDotExit
AllowInvalidNodes
AllowNonRFC953Hostnames
AllowSingleHopCircuits
AllowSingleHopExits
AlternateBridgeAuthority
AlternateDirAuthority
AlternateHSAuthority
AssumeReachable
AuthDirBadDir
AuthDirBadDirCCs
AuthDirBadExit
AuthDirBadExitCCs
AuthDirInvalid
AuthDirInvalidCCs
AuthDirFastGuarantee
AuthDirGuardBWGuarantee
AuthDirReject
AuthDirRejectCCs
AuthDirRejectUnlisted
AuthDirListBadDirs
AuthDirListBadExits
AuthDirMaxServersPerAddr
AuthDirMaxServersPerAuthAddr
AuthDirHasIPv6Connectivity
AuthoritativeDirectory
AutomapHostsOnResolve
AutomapHostsSuffixes
AvoidDiskWrites
BandwidthBurst
BandwidthRate
BridgeAuthoritativeDir
Bridge
BridgePassword
BridgeRecordUsageByCountry
BridgeRelay
CellStatistics
LearnCircuitBuildTimeout
CircuitBuildTimeout
CircuitIdleTimeout
CircuitStreamTimeout
CircuitPriorityHalflife
ClientDNSRejectInternalAddresses
ClientOnly
ClientPreferIPv6ORPort
ClientRejectInternalAddresses
ClientTransportPlugin
ClientUseIPv6
ConsensusParams
ConnLimit
ConnDirectionStatistics
ConstrainedSockets
ConstrainedSockSize
ContactInfo
ControlListenAddress
ControlPort
ControlPortFileGroupReadable
ControlPortWriteToFile
ControlSocket
ControlSocketsGroupWritable
CookieAuthentication
CookieAuthFileGroupReadable
CookieAuthFile
CountPrivateBandwidth
DataDirectory
DisableNetwork
DirAllowPrivateAddresses
TestingAuthDirTimeToLearnReachability
DirListenAddress
DirPolicy
DirPort
DirPortFrontPage
DirReqStatistics
DirAuthority
DirAuthorityFallbackRate
DisableAllSwap
DisableDebuggerAttachment
DisableIOCP
DisableV2DirectoryInfo_
DynamicDHGroups
DNSPort
DNSListenAddress
DownloadExtraInfo
EnforceDistinctSubnets
EntryNodes
EntryStatistics
TestingEstimatedDescriptorPropagationTime
ExcludeNodes
ExcludeExitNodes
ExcludeSingleHopRelays
ExitNodes
ExitPolicy
ExitPolicyRejectPrivate
ExitPortStatistics
ExtendAllowPrivateAddresses
ExtraInfoStatistics
FallbackDir
FascistFirewall
FirewallPorts
FastFirstHopPK
FetchDirInfoEarly
FetchDirInfoExtraEarly
FetchServerDescriptors
FetchHidServDescriptors
FetchUselessDescriptors
FetchV2Networkstatus
GeoIPExcludeUnknown
GeoIPFile
GeoIPv6File
GuardLifetime
HardwareAccel
HeartbeatPeriod
AccelName
AccelDir
HashedControlPassword
HidServDirectoryV2
HiddenServiceDir
HiddenServicePort
HiddenServiceVersion
HiddenServiceAuthorizeClient
HidServAuth
HSAuthoritativeDir
CloseHSClientCircuitsImmediatelyOnTimeout
CloseHSServiceRendCircuitsImmediatelyOnTimeout
HTTPProxy
HTTPProxyAuthenticator
HTTPSProxy
HTTPSProxyAuthenticator
IPv6Exit
ServerTransportPlugin
ServerTransportListenAddr
Socks4Proxy
Socks5Proxy
Socks5ProxyUsername
Socks5ProxyPassword
KeepalivePeriod
Log
LogMessageDomains
LogTimeGranularity
LongLivedPorts
MapAddress
MaxAdvertisedBandwidth
MaxCircuitDirtiness
MaxClientCircuitsPending
MaxMemInCellQueues
MaxOnionQueueDelay
MinMeasuredBWsForAuthToIgnoreAdvertised
MyFamily
NewCircuitPeriod
NamingAuthoritativeDirectory
NATDListenAddress
NATDPort
Nickname
WarnUnsafeSocks
NodeFamily
NumCPUs
NumDirectoryGuards
NumEntryGuards
ORListenAddress
ORPort
OutboundBindAddress
PathBiasCircThreshold
PathBiasNoticeRate
PathBiasWarnRate
PathBiasExtremeRate
PathBiasScaleThreshold
PathBiasDropGuards
PathBiasUseThreshold
PathBiasNoticeUseRate
PathBiasExtremeUseRate
PathBiasScaleUseThreshold
PathsNeededToBuildCircuits
PerConnBWBurst
PerConnBWRate
PidFile
TestingTorNetwork
TestingMinExitFlagThreshold
TestingMinFastFlagThreshold
OptimisticData
PortForwarding
PortForwardingHelper
PreferTunneledDirConns
ProtocolWarnings
PublishServerDescriptor
PublishHidServDescriptors
ReachableAddresses
ReachableDirAddresses
ReachableORAddresses
RecommendedVersions
RecommendedClientVersions
RecommendedServerVersions
RefuseUnknownExits
RejectPlaintextPorts
RelayBandwidthBurst
RelayBandwidthRate
RendPostPeriod
RephistTrackTime
RunAsDaemon
SafeLogging
SafeSocks
ServerDNSAllowBrokenConfig
ServerDNSAllowNonRFC953Hostnames
ServerDNSDetectHijacking
ServerDNSRandomizeCase
ServerDNSResolvConfFile
ServerDNSSearchDomains
ServerDNSTestAddresses
ShutdownWaitLength
SocksListenAddress
SocksPolicy
SocksPort
SocksTimeout
SSLKeyLifetime
StrictNodes
Support022HiddenServices
TestSocks
TokenBucketRefillInterval
Tor2webMode
TLSECGroup
TrackHostExits
TrackHostExitsExpire
TransListenAddress
TransPort
TunnelDirConns
UpdateBridgesFromAuthority
UseBridges
UseEntryGuards
UseEntryGuardsAsDirGuards
UseMicrodescriptors
UseNTorHandshake
User
UserspaceIOCPBuffers
V1AuthoritativeDirectory
V2AuthoritativeDirectory
V3AuthoritativeDirectory
TestingV3AuthInitialVotingInterval
TestingV3AuthInitialVoteDelay
TestingV3AuthInitialDistDelay
V3AuthVotingInterval
V3AuthVoteDelay
V3AuthDistDelay
V3AuthNIntervalsValid
V3AuthUseLegacyKey
V3BandwidthsFile
VersioningAuthoritativeDirectory
VirtualAddrNetworkIPv4
VirtualAddrNetworkIPv6
WarnPlaintextPorts
UseFilteringSSLBufferevents
__ReloadTorrcOnSIGHUP
__AllDirActionsPrivate
__DisablePredictedCircuits
__LeaveStreamsUnattached
__HashedControlSessionPassword
__OwningControllerProcess
MinUptimeHidServDirectoryV2
VoteOnHidServDirectoriesV2
___UsingTestNetworkDefaults
@mh-cbon
Copy link

mh-cbon commented Jul 11, 2019

updated

july 11 17:46:01 CEST 2019
AccountingMax
AccountingRule
AccountingStart
Address
AllowNonRFC953Hostnames
AlternateBridgeAuthority
AlternateDirAuthority
AssumeReachable
AuthDirBadExit
AuthDirBadExitCCs
AuthDirInvalid
AuthDirInvalidCCs
AuthDirFastGuarantee
AuthDirGuardBWGuarantee
AuthDirPinKeys
AuthDirReject
AuthDirRejectCCs
AuthDirListBadExits
AuthDirMaxServersPerAddr
AuthDirHasIPv6Connectivity
AuthoritativeDirectory
AutomapHostsOnResolve
AutomapHostsSuffixes
AvoidDiskWrites
BandwidthBurst
BandwidthRate
BridgeAuthoritativeDir
Bridge
BridgePassword
BridgeRecordUsageByCountry
BridgeRelay
BridgeDistribution
CacheDirectory
CacheDirectoryGroupReadable
CellStatistics
PaddingStatistics
LearnCircuitBuildTimeout
CircuitBuildTimeout
CircuitsAvailableTimeout
CircuitStreamTimeout
CircuitPriorityHalflife
ClientDNSRejectInternalAddresses
ClientOnly
ClientPreferIPv6ORPort
ClientPreferIPv6DirPort
ClientAutoIPv6ORPort
ClientRejectInternalAddresses
ClientTransportPlugin
ClientUseIPv6
ClientUseIPv4
ConsensusParams
ConnLimit
ConnDirectionStatistics
ConstrainedSockets
ConstrainedSockSize
ContactInfo
ControlPort
__ControlPort
ControlPortFileGroupReadable
ControlPortWriteToFile
ControlSocket
ControlSocketsGroupWritable
UnixSocksGroupWritable
CookieAuthentication
CookieAuthFileGroupReadable
CookieAuthFile
CountPrivateBandwidth
DataDirectory
DataDirectoryGroupReadable
DisableOOSCheck
DisableNetwork
DirAllowPrivateAddresses
TestingAuthDirTimeToLearnReachability
DirPolicy
DirPort
__DirPort
DirPortFrontPage
DirReqStatistics
DirAuthority
DirCache
DirAuthorityFallbackRate
DisableAllSwap
DisableDebuggerAttachment
DNSPort
__DNSPort
DormantClientTimeout
DormantTimeoutDisabledByIdleStreams
DormantOnFirstStartup
DormantCanceledByStartup
DoSCircuitCreationEnabled
DoSCircuitCreationMinConnections
DoSCircuitCreationRate
DoSCircuitCreationBurst
DoSCircuitCreationDefenseType
DoSCircuitCreationDefenseTimePeriod
DoSConnectionEnabled
DoSConnectionMaxConcurrentCount
DoSConnectionDefenseType
DoSRefuseSingleHopClientRendezvous
DownloadExtraInfo
TestingEnableConnBwEvent
TestingEnableCellStatsEvent
EnforceDistinctSubnets
EntryNodes
EntryStatistics
TestingEstimatedDescriptorPropagationTime
ExcludeNodes
ExcludeExitNodes
ExitNodes
MiddleNodes
ExitPolicy
ExitPolicyRejectPrivate
ExitPolicyRejectLocalInterfaces
ExitPortStatistics
ExtendAllowPrivateAddresses
ExitRelay
ExtORPort
__ExtORPort
ExtORPortCookieAuthFile
ExtORPortCookieAuthFileGroupReadable
ExtraInfoStatistics
ExtendByEd25519ID
FallbackDir
UseDefaultFallbackDirs
FascistFirewall
FirewallPorts
FetchDirInfoEarly
FetchDirInfoExtraEarly
FetchServerDescriptors
FetchHidServDescriptors
FetchUselessDescriptors
GeoIPExcludeUnknown
GeoIPFile
GeoIPv6File
GuardLifetime
HardwareAccel
HeartbeatPeriod
MainloopStats
AccelName
AccelDir
HashedControlPassword
HiddenServiceDir
HiddenServiceDirGroupReadable
HiddenServicePort
HiddenServiceVersion
HiddenServiceAuthorizeClient
HiddenServiceAllowUnknownPorts
HiddenServiceMaxStreams
HiddenServiceMaxStreamsCloseCircuit
HiddenServiceNumIntroductionPoints
HiddenServiceExportCircuitID
HiddenServiceStatistics
HidServAuth
ClientOnionAuthDir
HiddenServiceSingleHopMode
HiddenServiceNonAnonymousMode
HTTPProxy
HTTPProxyAuthenticator
HTTPSProxy
HTTPSProxyAuthenticator
HTTPTunnelPort
__HTTPTunnelPort
IPv6Exit
ServerTransportPlugin
ServerTransportListenAddr
ServerTransportOptions
SigningKeyLifetime
Socks4Proxy
Socks5Proxy
Socks5ProxyUsername
Socks5ProxyPassword
KeyDirectory
KeyDirectoryGroupReadable
HSLayer2Nodes
HSLayer3Nodes
KeepalivePeriod
KeepBindCapabilities
Log
LogMessageDomains
LogTimeGranularity
TruncateLogFile
SyslogIdentityTag
AndroidIdentityTag
LongLivedPorts
MapAddress
MaxAdvertisedBandwidth
MaxCircuitDirtiness
MaxClientCircuitsPending
MaxConsensusAgeForDiffs
MaxMemInQueues
MaxOnionQueueDelay
MaxUnparseableDescSizeToLog
MinMeasuredBWsForAuthToIgnoreAdvertised
MyFamily
NewCircuitPeriod
NATDPort
__NATDPort
Nickname
NodeFamily
NoExec
NumCPUs
NumDirectoryGuards
NumEntryGuards
NumPrimaryGuards
OfflineMasterKey
ORPort
__ORPort
OutboundBindAddress
OutboundBindAddressOR
OutboundBindAddressExit
PathBiasCircThreshold
PathBiasNoticeRate
PathBiasWarnRate
PathBiasExtremeRate
PathBiasScaleThreshold
PathBiasDropGuards
PathBiasUseThreshold
PathBiasNoticeUseRate
PathBiasExtremeUseRate
PathBiasScaleUseThreshold
PathsNeededToBuildCircuits
PerConnBWBurst
PerConnBWRate
PidFile
TestingTorNetwork
TestingMinExitFlagThreshold
TestingMinFastFlagThreshold
TestingLinkCertLifetime
TestingAuthKeyLifetime
TestingLinkKeySlop
TestingAuthKeySlop
TestingSigningKeySlop
OptimisticData
ProtocolWarnings
PublishServerDescriptor
PublishHidServDescriptors
ReachableAddresses
ReachableDirAddresses
ReachableORAddresses
RecommendedVersions
RecommendedClientVersions
RecommendedServerVersions
RecommendedPackages
ReducedConnectionPadding
ConnectionPadding
RefuseUnknownExits
RejectPlaintextPorts
RelayBandwidthBurst
RelayBandwidthRate
RendPostPeriod
RephistTrackTime
RunAsDaemon
ReducedExitPolicy
Sandbox
SafeLogging
SafeSocks
ServerDNSAllowBrokenConfig
ServerDNSAllowNonRFC953Hostnames
ServerDNSDetectHijacking
ServerDNSRandomizeCase
ServerDNSResolvConfFile
ServerDNSSearchDomains
ServerDNSTestAddresses
KISTSchedRunInterval
KISTSockBufSizeFactor
Schedulers
ShutdownWaitLength
SocksPolicy
SocksPort
__SocksPort
SocksTimeout
SSLKeyLifetime
StrictNodes
TestSocks
TokenBucketRefillInterval
TrackHostExits
TrackHostExitsExpire
TransPort
__TransPort
TransProxyType
UpdateBridgesFromAuthority
UseBridges
UseEntryGuards
UseGuardFraction
UseMicrodescriptors
User
AuthDirSharedRandomness
AuthDirTestEd25519LinkKeys
V3AuthoritativeDirectory
TestingV3AuthInitialVotingInterval
TestingV3AuthInitialVoteDelay
TestingV3AuthInitialDistDelay
TestingV3AuthVotingStartOffset
V3AuthVotingInterval
V3AuthVoteDelay
V3AuthDistDelay
V3AuthNIntervalsValid
V3AuthUseLegacyKey
V3BandwidthsFile
GuardfractionFile
VersioningAuthoritativeDirectory
VirtualAddrNetworkIPv4
VirtualAddrNetworkIPv6
WarnPlaintextPorts
__ReloadTorrcOnSIGHUP
__AllDirActionsPrivate
__DisablePredictedCircuits
__DisableSignalHandlers
__LeaveStreamsUnattached
__HashedControlSessionPassword
__OwningControllerProcess
__OwningControllerFD
MinUptimeHidServDirectoryV2
TestingServerDownloadInitialDelay
TestingClientDownloadInitialDelay
TestingServerConsensusDownloadInitialDelay
TestingClientConsensusDownloadInitialDelay
ClientBootstrapConsensusAuthorityDownloadInitialDelay
ClientBootstrapConsensusFallbackDownloadInitialDelay
ClientBootstrapConsensusAuthorityOnlyDownloadInitialDelay
ClientBootstrapConsensusMaxInProgressTries
TestingBridgeDownloadInitialDelay
TestingBridgeBootstrapDownloadInitialDelay
TestingClientMaxIntervalWithoutRequest
TestingDirConnectionMaxStall
TestingDirAuthVoteExit
TestingDirAuthVoteExitIsStrict
TestingDirAuthVoteGuard
TestingDirAuthVoteGuardIsStrict
TestingDirAuthVoteHSDir
TestingDirAuthVoteHSDirIsStrict
___UsingTestNetworkDefaults

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment