[community] Question regarding TOR server routing policy

[Michael Robinson]

I posted this on StackExchange before I found your mailing list. Re-asking here for a more authoritative answer.

My question is about how TOR handles routing of traffic. Here's the situation: User has laptop1 and server1 on a LAN. The server runs a hidden service (say a webserver) sharing over TOR only, i.e. open to localhost only, at xxyyzzaabbcc.onion. The server allows TOR proxy connections from the LAN.

If the user points configures his laptop to use server1:9050 as a proxy and navigates to xxyyzzaabbcc.onion, does the local TOR instance on server1 recognize that traffic as local and simply forward the request to localhost, or does the traffic first go out over the TOR network, then back to server1's localhost to get to the webserver?

Put another way, if someone on the LAN uses server1's proxy to access that proxy's hidden service, does the traffic stay local?

one could argue that in my example traffic is essentially local to the server itself, similar to a user on the server accessing a service on the server, and that there is an arguable decrease in security by traffic going out through TOR nodes and returning because it increases the attack surface of the traffic. I’m curious what the pros think about this scenario, however.

Thank you for your time
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-community-team/attachments/20200217/8d1de088/attachment.html>