wiki:doc/GoodBadISPs

Version 172 (modified by karsten, 7 years ago) (diff)

Name changed from TheOnionRouter/GoodBadISPs to doc/GoodBadISPs

This page aims to list community experiences with Tor and various Internet Service Providers (ISPs) around the world. Some ISPs are Tor-friendly, some are not. Some are competent and clueful about Tor or about security in general. Let us know!

Be sure to provide useful information like how much bandwidth you pushed, whether you thought the deal was cheap or expensive, how hard you had to work to make them understand what's going on, how long your server has been running, and whether you'd recommend them to others.

Good experiences

  • Team Cinipac "allow on all server locations services like TOR/VPN/I2P because we are supporting projects who safe the privacy like wikileaks, TOR etc. We stand behind our customer and abuse will be forwarded to you to take action. If you have problems, need help etc. just only contact our Abuse/Law Department they will help you in this case. We do not provide any kind of information to third parties. Our company locate in Panama and we ignore court orders from other countries, because we think privacy is an human right." - pretty expensive though
  • Santrex has servers in UK, France, USA, Germany and Canada, and they explicitly allow Tor exits at all locations - but recommend their DDOS protected US location. Abuse will be forwarded, and if dealt with within 24-48hrs, the account won't get suspended. They also allow a wide range of payment processors besides PayPal, eg. Liberty Reserve, WebMoney and CashU.
  • Ethr.net is a Tor-friendly ISP that already has a 20Mbit Tor Exit Node hosted there. Their services are a bit pricey, but they have excellent peering, and offer a "Cheap-Net" option to give you he.net bandwidth at a little less than half of their listed prices (~$20/Mbit).
  • Leetnet.net is a BitCoin-only VPS provider that is Tor friendly. Good customer service, prices that change to reflect the USD/BTC market, great bandwidth, and no-frills VPS.

US

  • Cyberonic is now on the COVAD backbone, so you should be able to get service from them anywhere you could get other COVAD-based service. They offer 6.0m/768kbps at $59/month, w/ a static IP. Can't recall ever having downtime due to them and their TOS only restrict Email relay servers (and that's probably only enforced if you have complaints). All other servers ok. If you sign up, tell 'em brianwc sent you and I think I get a free month. -- BrianC
  • RoadRunner (TimeWarner) (USA): Very reliable service. Been running web server on 80 for several years. IP changes when cable modem reset (almost never for me). No ports blocked (that I know of). No BW limits, only speed caps. I've got 5Mbps down/384kbps up. Definitely recommend. Running Tor since Jan 06. -- MichaelAnsel
  • Speakeasy allows users to run arbitrary servers without port or traffic volume restrictions. Static IP addresses are offered without question or complaint.
  • Slicehost/Rackspace (a hosting provider, not an ISP) allows running Tor on their servers, but if anybody downloads copyrighted material illegally through Tor, that's a ToS violation. I had an issue with a DMCA (copyright violation) notice triggered by Tor activity exiting through my server, and I had to agree to block the port on which the material was downloaded for them to let me continue running the exit relay. Setting an ExitPolicy that only allows certain ports is probably smart if you don't want to get into trouble. Otherwise, the service is great; each server gets guaranteed 10 Mbps, and the network has never been down in the 6 months I've been a customer. Plans start at US $20/month, reasonably cheap as these things go. Update: 3 March 2010: Approach with caution. I'd love to move my exit node to Slicehost, but after trading several e-mails with a Greg in technical support, I could not get a straight answer about whether Tor complies with the company's AUP. Greg's response when pushed: "Again, we do not recommend this service to be run on our platform. If you have any other questions, please let us know." -- EricB
  • Sh3lls says their dedicated servers can be used for anything legal, as long as the customer handles abuse they're fine.
  • ThePlanet allows Tor exits, WHOIS can be customized.

Germany

  • Weesly is very liberal and allows hosting Tor in any kind. (q23p, 10.06.11)
  • Although its located in the netherlands, Germans could try Leaseweb. The're hosting more than one *big* Tor-server and are quite tolerant. (anonym, 4/2010)
  • EUServ seems to be a good ISP for Tor. They have a bad support, but if you know how to maintain your server, this ISP is a good choice. --JensKubieziel (http://identi.ca/notice/15888906)
  • Hetzner are a German hosting provider with a number of Tor servers running on Dedicated Hosts. So far they appear to be tolerant of Tor services although no abuse has been reported to test this. -- Steve_Crook
  • IPX-Server.de (DE) has generous traffic limits (there are contracts including 1TB/Mo) and behaves as I'd expect it from good partners. Some BSA-notice regarding Torrents arrived, they informed me and told me to stop this "illegal activities" and said, after reading and (at least it seems so) understanding my reply explaining tor with "ok, we won't interfere, your problem".
  • HostEurope: "generell schränken wir die Nutzung nur bei IRC-Diensten ein. TOR-Server können grundsätzlich betrieben werden. Allerdings müssen wir eventuell auftretende Beschwerden dennoch an Sie weiterleiten. Vor allem wenn der Server als Exit-Node fungiert ist es wahrscheinlich dass Beschwerden eingehen werden." I've had a contradicting answer a few days later: "Leider müssen wir Ihnen mitteilen, dass wir aufgrund interner Richtlinien das Hosting für Ihre gewünschten Zwecke ablehnen müssen."
  • http://www.keyweb.de/ offers cheap and reliable Virtuals Servers with 2GB HDD-space and liberal policies. The cheapest VPS is around 8 Euros. Not useful for high traffic nodes, they limit heavily after 5TB
  • Server4You (Germany, part of Intergenia AG) hasn't complained about a tor server (running on a non-virtual server) pushing 300GB/month for more than two years. They only block incoming port 6667. They are hosting more than a dozen tor servers. -- SvenNeuhaus (2008/01)

Server4You limits on virtual servers are ridiculous, actually. numtcpsock 288, tcpsndbuf/tcprcvbuf 3598712, lots of failcnt. Cant use them with tor. [2010/02]

I've asked Server4You support and they state servers with complaints about Tor will be canceled immediately (see the quote in the "Bad Experience" section)

United Kingdom

  • Clustered.net has nothing against Tor nodes in principle, but warned that they'd asked me to stop if a large number of abuse reports were received. My fast/stable exit node's been running there for three months now with no hassle.

Finland

  • TeliaSonera Finland: Largest ISP in Finland. I've been running Tor node on 8/1 ADSL with semipermanent IP address (changes rarely). ISP has not interfered in anyway. They block only port 25. In the future TSF may activate "black lists" based on DSN (sorry effort to "fight kiddied porn). 60+ kBps continuosly. -- JussiSavola

Netherlands

  • John Brooks runs a 2TB node at LeaseWeb. He would recommend them for running a relay. -- JensKubieziel
  • Ecatel explicitly allows Tor exit nodes and forwards abuse/DCMA, but their network isn't the most stable. You need to email them for a custom offer. They also accept UKash/CashU.
  • Netrouting has no problems with Tor
  • DirectVPS has no problems with Tor

Norway

  • NextGentel (Norway): Allows Tor-servers. Assists Norwegian secret police in doing total surveillance of customers they torture for sharing their opinion without warrant or even a reason.

Sweden

  • TeliaSonera is also big in Sweden and deliver where other ISPs can't (They were previously the state monopoly, which they still are, but they now pretend it's free competition while they still own all the fiber). Blocks port 25 for all customers. Does not bother Tor-server operators.
  • PRQ has no problems with Tor exits and abuse forwarding, but at a heavy price...

Canada

  • TekSavvy has a server-friendly Internet Use Policy (e.g., running a Tor relay) and has taken a stand in favour of net neutrality. (2008-12)
  • Blacklotus allows Tor exits and has (quote management) "pretty liberal abuse handling policies"

Slovenia

  • With Tuš Hosting we had really good experience running a 5 MB/s full-exit Tor on a dedicated server on colocation. They said that they care just that we pay our bills and they just simply forward DMCA notices to us to handle (or ignore) them and forward police to our home doors to question us. I really recommend them and if anybody wants to put another Tor node/server there I am willing to help. Mitar (mitar@…)

Malaysia

Ukraine

New Zealand and Australia

  • http://rimuhosting.com/index.jsp Quite open to the proposition when approached. Have servers in N.Z.; Sydney; London; and Dallas. Locations may vary, but quite happy with the specific Oz/NZ query. No co-lo, but root access. "You can run anything you like, as long as it's legal." The moving goal-posts of legality are the only concern here.

Bad experience

US

  • Ezzi.net. Running Tor was fine until Undernet mailed Ezzi.net a complaint which falsely claimed Tor was somehow a "botnet". This made a very rude person at Ezzi send a mail which falsely claimed the Tor servers were hacked and "It appears whoever caused this hacked the servers by brute forcing SSH logins and uploading a fake httpd binary and launching it.". This person kept on insisting the servers were hacked after being politely informed that Undernet had confused Tor traffic with a "botnet" and that the servers where not compromised in any way, so it's kind of hard to tell if the person was troublesome because the person did not understand what Tor is or if this person at Ezzi generally just imagines things and think they are part of reality. But it is clear that most ezzi customers become ex-customers after meeting this known-to-be-rude tech.
  • LayeredTech are a server hosting company located in Texas. I ran a server for six months without any issues, but then someone used the Tor server to exploit a PHP vulnerability. Explaining the goals of Tor to LayeredTech resulted in it being made clear that I was responsible for any and all abuse through my IP address. Shortly after this they ordered me to shutdown Tor. -- Steve_Crook
  • SONIC.NET of Santa Rosa, CA have terms of service that would apparently be Tor-friendly; but this thread http://www.dslreports.com/forum/remark,15272743 includes comments by SONIC.NET's CEO that don't sound particularly friendly or open to the idea of running an exit node.
  • Linode will terminate your service if you run an exit node. Non-exit relays are allowed.
  • Tektonic will suspend your VPS with no prior notice if you run "any proxy". They used to tolerate TOR if you didn't run an exit node but they are now apparently auditing the VPSs for processes named tor. They did however restore the VPS very promptly after I promised to uninstall tor and privoxy.
  • Comcast's Acceptable Use Policy for residential customers says no servers or proxies under "Technical Restrictions" (2009-08-10 tip from Scott Bennett).
  • 100tb.com (Softlayer) allows Tor exits, abuse needs to be addressed within 24 hours. Despite this "policy", my experience was bad. They were very understanding at first when the exit was just made and got about 5 DMCA notices, and replied explaining Tor. A few days later, I got forwarded about 30 DMCAs, and few from Spamcop (even though common mail ports were blocked); as usual, I replied that it's entirely because of Tor, and that I have no pirated content or viruses on my box. Apparently they got fed up with the constant DMCAs, and replied with "More will need to be done to block this. We will not tolerate open abuse of our network (DMCAs and SPAM via a "Tor Exit Node"). This type of service is prone to abuse and tarnishes not only our reputation but your reputation with us. If action is not taken to help prevent this going forward we will be forced to block access to the server". At this point, I set it as a "middleman" instead of an exit, in hopes that it would stop the flow of DMCA notices. Nope, they disabled the interface. I have at this point stopped Tor on the 100tb box, and do not know what to do now. There is no way at all to block all P2P, and 100tb refuses to acknowledge this. They make claims "Tor is ALL RIGHT on 100tb boxes!", but then go and screw you over when you get DMCA notices (it's a when, not an if. Running a Tor exit WILL produce DMCA notices). I highly suggest avoiding these people at 100tb/Hosting Services, Inc./midphase if you are seriously considering running a stable Tor exit. We had a server there for 6 months, but then they told us Softlayer as DC doesn't allow it any longer. (torservers.net)
  • M5 Hosting does not explicitly forbid Tor in their AUP, but after operating an exit node for 3 weeks and receiving three DMCA complaints, their abuse department communicated, "Whereas Tor exit nodes facilitate unaccountable actions by anonymous users and those actions regularly expose [M5] to undue risk as well as oversight costs and unknowable legal expenses, Tor exit nodes will not be permitted on M5's network" because "just responding to the abuse complaints costs [them] money and it costs money to [their] upstream providers and increase[s] [their] risks of incurring legal defense expenses" and ordered the Tor exit node to be shut down.
  • FDCservers allows Tor, and customers to react to abuse within 24 hours before taking further steps. Be cautious if operating an exit node, for the boilerplate abuse responses are "not acceptable" per their Network Security Administrator. He sited the AUP/TOS and stated I have "the full responsibility for the content hosted and passing through the server. So if you cannot track or take actions against reported abuse issues you should terminate or restrict specific service" (which was a single exploitable php script probe).

Phobos' research

ISP Name Allowed IRC? Allowed Proxies? Allowed Tor?
CI Host N Y Y
Iweb.ca N Y Y
Host Voice N N N
Super Servers N N N
Vericenter N Y Y
Dedicated Now] N Y Y
Soft Layer Y Y Y
Tek Tonic N N N
Unixshell N N N
Verizon FiOS N N N

Notes:

  • Unixshell/Tektonic are the same company. They nullroute you on the first abuse complaint. Middleman nodes are ok, but the abuse dept requests "SafeLogging 0" set in your torrc and wants full access to your logs on demand.
  • Verizon FiOS officially does not allow any incoming traffic, they reserve the right to disconnect you at any time for violation of this policy. Users have run middleman nodes without any incidents from VZ. Exit nodes with abuse problems have resulted in legal threats and disconnection threats, but no disconnection as of yet.

Germany

  • The german ISP dogado ended up killing the tor server process and blocking the OR-port on my vServer. -- d00b
  • The german ISP EuServ / ISPro -- they just broke the contract, switching our Server off. -- padeluun
  • Manitu forbids any anonymisation techniques in their AGBs --qbi (gamambel: I have asked and they made me an offer for 100mbit dedi at 1500 euro)
  • OVH (German ISP) offers root server with a high bandwith (up to 5.000 kB/s). They changed their AGB and cancel "problematic" contracts very fast. -- qbi
  • The german ISP Plusserver.de shut down h07onion due to gross incompetence. Look at http://archives.seul.org/or/talk/Mar-2005/msg00120.html for more details.
  • "I have recently checked manitu because they advertise with internet without censorship and data retention. Unofortunatelly they explictly forbid providing anonymazation services in ther general terms and conditions. On inquiry they have justified this restriction with the enourmous bandwidth consumption and the impossibility to achieve fair combined costing in this case. For the same reason they forbid running mirrors of public data such as open source software. So I believe their argument is no pretense." -- Alex, Dec 01 2009 via email.
  • The german provider netcup.de suspended one vserver running a tor exit node, analyzed stuff, and charged 192€ for processing _one_ dmca-notice. - ari
  • netdirekt.de: "Leider unterstützen wir keine Tor Exits. Sofern diese in unserem Netzwerk sind gab es vermutlich noch keine Vorfälle."
  • Strato writes in their AGB "Abschnitt III: Sonderregeln für dedizierte und virtuelle Server ... 1.1 Eine Nutzung der Server zur Bereitstellung folgender Dienste ist ausgeschlossen: ... Anonymisierungsdienste, z.B. Tor, JAP, Proxyserver"
  • I've asked the Server4You support about Tor and they stated "TOR Dienste sind bei uns ebenfalls aufgrund der rechtlichen Graulage nicht gerne gesehen und werden bei Abuse Aufkommen direkt gekündigt." (March 2011)

France

  • The french hosting company dedibox (member of iliad) suspended without warning a bunch a machines that were running Tor after the police came down about creditcard fraud.
  • Gandi VPS will give one warning and then delete your account if you run a Tor node on their VPS system. Don't try this if you have any domains registered with that account as well, it's difficult to get them back.
  • OVH / Kimsufi suspended and restarted into FTP only mode claiming "hack" even when running as relay, Contacted OVH to explain TOR got the following reply: Actually we don't like TOR on our network, as either a relay or an exit node. You can check our T&C

Finland

Canada

  • Rogers has a no-servers clause in the TOS for their home internet service. If you are running an exit node and receive DMCA notices, you will have no legal recourse except to cancel service. (2008-03)

Sweden

  • Perspektiv bredband supposedly allows for running tor nodes, but will disable your account due to spam.

United Kingdom

  • I have asked and Swiftway doesn't want Tor exits on their network.

Italy

  • avoid SEFLOW.it! they say it's against Italian law to have a tor relay, asked which law, they said to contact a lawyer. (atrent: do you need a more articulate explanation? I'm the one who had the bad experience, I have all the emails exchanged and I can translate them)
  • GARR.it: well... it's not an ISP but nonetheless since it's the connectivity provider of italian universities we should mention that they do NOT allow exit nodes on their net (I had one, they obliged me to tear it down)

Slovenia

  • Domenca has crazy prices (10 EUR/Mbit/s + 300 EUR/U for dedicated server per month) and they require not just to respond to all complaints in one working day, but also to prevent them in the future. Just replying with explanation that it is an anonymous service and there is no way to prevent this, is not enough for them. So it seems impossible to really host Tor exit node there. Mitar (mitar@…)