When a network or a country blocks Tor, bridges are the way through. Which type to pick, how to get one, and what to expect from the connection.
nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onionnexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onionnexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onionSome networks block Tor outright. The countermeasure is built in and it is called a bridge, which is a relay whose address is not published so it cannot be blocked from a list.
Public Tor relays are listed openly, which is what makes the network verifiable and also what makes it easy to filter. A network operator downloads the list and refuses connections to everything on it. Bridges are relays deliberately kept off that list, so filtering by list does not catch them.
| Type | How it looks on the wire | Choose it when |
|---|---|---|
| obfs4 | Random noise with no recognisable pattern | The block is a simple list filter |
| Snowflake | Ordinary video call traffic | You want something that works with no setup |
| meek | Traffic to a large cloud provider | Everything else is blocked, and you accept it being slow |
Start with the built in bridges in Tor Browser, since they need no arrangement at all. If those are blocked too, request one that is not shared as widely.
Slower connections and more failed attempts than an unblocked network. That is the cost of going around a filter and it does not mean anything is wrong. Give each attempt a full minute before deciding it failed.
On a network where Tor is blocked, using it may itself draw attention. Bridges address that too, since obfs4 and Snowflake are designed to not look like Tor. Whether that is sufficient depends on circumstances no website can assess for you, so decide it deliberately rather than assuming.
The full Windows route to a Nexus onion address, what the operating system keeps behind your back, and the settings worth changing before you start.
DesktopHow to get to a Nexus onion address on a Mac, the Gatekeeper prompts you will meet, and which macOS conveniences work against you here.
DesktopThe Linux route to a Nexus onion address, why the distribution package is usually the wrong choice, and what a sensible setup looks like.
Where to get Tor Browser, why the source matters more than the version, and the mistakes that put a modified copy on a machine.
The signature check that proves the file came from the Tor Project unmodified, why it is worth the ten minutes, and what a failure means.
Tor Browser ships on its most permissive setting. What the three levels change, why Safest is the right default here, and what breaks.