All types of relays are important, but they have different technical requirements and potential legal implications.
Understanding the different kinds of relays is the first step to learning which one is right for you.
Example Tor Circuit:
Tor User -> Guard Relay -> Middle Relay -> Exit Relay -> Destination (i.e example.com)
When using a bridge:
Tor User -> Bridge Relay -> Middle Relay -> Exit Relay -> Destination (i.e example.com)
Guard and middle relays
(also known as non-exit relays)
A guard relay is the first relay (hop) in the chain of 3 relays that make up a Tor circuit.
A middle relay is a relay that acts as the second hop in the Tor circuit.
To become a guard relay, the relay has to be stable and fast (at least 2MByte/s of upstream and downstream bandwidth) otherwise it will remain a middle relay.
Guard and middle relays usually do not receive abuse complaints.
All relays will be listed in the public list of Tor relays, so they may be blocked by certain services that don't understand how Tor works or deliberately want to censor Tor users.
If you are running a relay from home and have one static IP, you may want to consider running a bridge instead so that your non-Tor traffic doesn't get blocked as though it's coming from Tor.
If you have a dynamic IP address or multiple static IPs, this isn't as much of an issue.
A non-exit Tor relay requires minimal maintenance efforts and bandwidth usage can be highly customized in the Tor configuration (will be covered in more detail later in this guide).
The so called "exit policy" of the relay decides if it is a relay allowing clients to exit or not.
A non-exit relay does not allow exiting in its exit policy.
Exit relay
The exit relay is the final relay in a Tor circuit, the one that sends traffic out to its destination.
The services Tor clients are connecting to (website, chat service, email provider, etc) will see the IP address of the exit relay instead of the real IP address of the Tor user.
Exit relays have the greatest legal exposure and liability of all the relays.
For example, if a user downloads copyrighted material while using your exit relay, you, the operator may receive a DMCA notice.
Any abuse complaints about the exit will go directly to you (via your hosting provider, depending on the WHOIS records).
Generally, most complaints can be handled pretty easily through template letters, which we'll discuss further in the legal considerations section.
Because of the legal exposure that comes with running an exit relay, you should not run a Tor exit relay from your home.
Ideal exit relay operators are affiliated with some institution, like a university, a library, a hackerspace or a privacy related organization.
An institution can not only provide greater bandwidth for the exit, but is better positioned to handle abuse complaints or the rare law enforcement inquiry.
If you are considering running an exit relay, please read the section on legal considerations for exit relay operators.
Bridge
The design of the Tor network means that the IP addresses of Tor relays (guard, middle, and exit) are public.
However, one of the ways Tor can be blocked by governments or ISPs is by blocklisting the IP addresses of these public Tor relays.
Tor bridges are relays in the network that are not listed in the public Tor directory, which makes it harder for ISPs and governments to block them.
Bridges are useful for Tor users under oppressive regimes or for people who want an extra layer of security because they're worried somebody will recognize that they are contacting a public Tor relay IP address.
Several countries, including China and Iran, have found ways to detect and block connections to Tor bridges.
Pluggable transports, a special kind of bridge, address this by adding an additional layer of obfuscation.
Bridges are relatively easy, low-risk and low bandwidth Tor nodes to operate, but they have a big impact on users.
A bridge isn't likely to receive any abuse complaints, and since bridges are not listed as public relays, they are unlikely to be blocked by popular services.
Bridges are a great option if you can only run a Tor node from your home network, have only one static IP, and don't have a large amount of bandwidth to donate -- we recommend giving your bridge at least 1 Mbit/sec of bandwidth.
Please see the relay requirements page to learn about the technical requirements for each relay type.
