Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 1 down vote favorite

Do you think Tor should be run over IPsec, or IPsec over Tor? Please be specific as of why you made this decision.

share|improve this question
3  
You obviously have no idea what is IPSEC. – geek May 9 '10 at 12:54

migrated from stackoverflow.com May 9 '10 at 7:04

3 Answers

up vote 1 down vote

As Tor runs in an upper layer, I can't see how IPsec could be run on it.

share|improve this answer
up vote 1 down vote

As far as I understand from the Tor page: my first question is what is the relation between Tor and IPSEC?

Secondly, Tor is just for instead of taking a direct route from source to destination, data packets on the Tor network take a random pathway through several relays that cover your tracks so no observer at any single point can tell where the data came from or where it's going.

It also states that to create a private network pathway with Tor, the user's software or client incrementally builds a circuit of encrypted connections through relays on the network.

When I look in this perspective, Tor is just changing the IP addresses from source to destination and IP address as you may know are in the network layer, so IPSEC is in-between the datalink layer and network layer.

enter image description here

share|improve this answer
Tor works on the transport layer - TCP, not IP. It doesn't just "change the IP addresses". – grawity May 9 '10 at 18:15
Tor encrypts traffic during transport, but it is decrypted at the exit node before the exit node forwards it to its intended destination. The exit node can eavesdrop on the traffic unless the traffic itself is an encrypted protocol such as SSL. Tor does NOT substitute for encrypted transports! – ultrasawblade Jul 30 '11 at 3:09
up vote -1 down vote

I guess that you can run IPsec over IP over HTTP over TOR. If you really want.

The hack is IP over HTTP. There seems to be e.g. http://www.nocrew.org/software/httptunnel.html

I have not tried.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.