Crate arti_client[][src]

Expand description

High-level functionality for accessing the Tor network as a client.


The arti-client crate aims to provide a safe, easy-to-use API for applications that want to use Tor network to anonymize their traffic. It hides most of the underlying detail, letting other crates decide how exactly to use the Tor crate.

This crate is part of Arti, a project to implement Tor in Rust. It is the highest-level library crate in Arti, and the one that nearly all client-only programs should use. Most of its functionality is provided by lower-level crates in Arti.

⚠ Warnings ⚠

Note that Arti is a work in progress; although we’ve tried to write all the critical security components, you probably shouldn’t use Arti in production until it’s a bit more mature.

Also note that all of the APIs for this crate, and for Arti in general, are not the least bit stable. If you use this code, please expect your software to break on a regular basis.

Using arti-client

The main entry point for this crate is the TorClient, an object that lets you make connections over the Tor network.

Calling TorClient::bootstrap establishes a connection to the Tor network, pulling in necessary state about network consensus as required. This state gets persisted to the locations specified in the TorClientConfig.

A client can then be used to make connections over Tor with TorClient::connect, which accepts anything implementing IntoTorAddr. This returns a DataStream, an anonymized TCP stream type that implements AsyncRead and AsyncWrite, as well as the Tokio versions of those traits if the tokio crate feature is enabled.

The TorAddr type is intended to ensure that DNS lookups are done via the Tor network instead of locally. Doing local DNS resolution can leak information about which hostnames you’re connecting to to your local DNS resolver (i.e. your ISP), so it’s much better to let Arti do it for you to maintain privacy.

If you really want to connect to a raw IP address and know what you’re doing, take a look at TorAddr::dangerously_from – but be careful!

Example: making connections over Tor

// The client configuration describes how to connect to the Tor network,
// and what directories to use for storing persistent state.
let config = TorClientConfig::default();
// Arti needs a handle to an async runtime in order to spawn tasks and use the
// network. (See "Multiple runtime support" below.)
let rt = tor_rtcompat::tokio::current_runtime()?;

// Start the Arti client, and let it bootstrap a connection to the Tor network.
// (This takes a while to gather the necessary directory information.
// It uses cached information when possible.)
let tor_client = TorClient::bootstrap(rt, config).await?;

// Initiate a connection over Tor to, port 80.
let mut stream = tor_client.connect(("", 80)).await?;

use futures::io::{AsyncReadExt, AsyncWriteExt};

// Write out an HTTP request.
    .write_all(b"GET / HTTP/1.1\r\nHost:\r\nConnection: close\r\n\r\n")

// IMPORTANT: Make sure the request was written.
// Arti buffers data, so flushing the buffer is usually required.

// Read and print the result.
let mut buf = Vec::new();
stream.read_to_end(&mut buf).await?;

println!("{}", String::from_utf8_lossy(&buf));

More advanced usage

This version of Arti includes basic support for “stream isolation”: the ability to ensure that different TCP connections (‘streams’) go over different Tor circuits (and thus different exit nodes, making them originate from different IP addresses).

This is useful to avoid deanonymizing users by correlation: for example, you might want a Tor connection to your bank and a Tor connection to an online forum to use different circuits, to avoid the possibility of the two identities being linked by having the same source IP.

Streams can be isolated in two ways:

Multiple runtime support

Arti uses the tor_rtcompat crate to support multiple asynchronous runtimes; currently, both Tokio and async-std are supported.

Functions in this crate, like TorClient::bootstrap, will expect a type that implements tor_rtcompat::Runtime, which can be obtained:

Feature flags

tokio – (Default) Build with support for the Tokio backend.

async-std – Build with support for the async_std backend.

static – Link with static versions of your system dependencies, including sqlite and/or openssl.

experimental-api – Build with experimental, unstable API support. Note that these APIs are NOT covered by semantic versioning guarantees: we might break them or remove them between patch versions.


pub use config::TorClientConfig;


Types and functions to configure a Tor client.

Code to collect and publish information about a client’s bootstrapping status.


The read half of a DataStream, implementing [futures::io::AsyncRead].

An anonymized stream over the Tor network.

The write half of a DataStream, implementing [futures::io::AsyncWrite].

A token used to isolate unrelated streams on different circuits.

Preferences for how to route a stream over the Tor network.

An address object that you can connect to over the Tor network.

An active client session on the Tor network.


Represents errors that can occur while doing Tor operations.

An error created while making or using a TorAddr.


An object that can be converted to a TorAddr, but which it might be risky to get in the first place if you’re hoping for anonymity.

An object that can be converted to a TorAddr with a minimum of risk.

Type Definitions

Alias for the Result type used by the arti_client crate.