Connect to `.onion` websites via SOCKS Proxy with Arti (version: 1.1.11)

arti_on_ubuntu.md

How to connect to .onion websites via SOCKS Proxy with Arti

Environment

❯ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 25.04
Release:        25.04
Codename:       plucky

❯ uname -vorm
6.14.0-15-generic #15-Ubuntu SMP PREEMPT_DYNAMIC Sun Apr  6 15:05:05 UTC 2025 x86_64 GNU/Linux

❯ rustup show
Default host: x86_64-unknown-linux-gnu
rustup home:  /home/eggplants/.rustup

installed toolchains
--------------------
stable-x86_64-unknown-linux-gnu (active, default)

active toolchain
----------------
name: stable-x86_64-unknown-linux-gnu
active because: it's the default toolchain
installed targets:
  x86_64-unknown-linux-gnu

Build Arti binary

Repo: https://gitlab.torproject.org/tpo/core/arti Docs: https://tpo.pages.torproject.net/core/arti/guides/compiling-arti

From crates.io

cargo install arti

From source

To install executable as a systemwide command:

sudo apt install -y libsqlite3-dev libssl-dev
git clone https://gitlab.torproject.org/tpo/core/arti --single-branch --depth 1
cargo install --path ./arti/crates/arti

Use as a SOCKS Proxy on Ubuntu

1. Open Setting > Network > Proxy
2. Select Manual in Configuration
3. Set URL localhost / Port 9150 to SOCKS Host Section
4. Enable Network Proxy
5. Run $ arti proxy or $ ./path/to/arti proxy
   • Add -o address_filter.allow_onion_addrs=true if you wanna connect to .onion Websites
   • See details why this option is needed: https://forum.torproject.org/t/8202

Example

CIA official site: http://ciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onion

❯ arti proxy -o address_filter.allow_onion_addrs=true
2025-04-19T12:14:29Z  INFO arti::subcommands::proxy: Starting Arti 1.4.2 in SOCKS proxy mode on localhost port 9150 ...
2025-04-19T12:14:29Z  INFO arti_client::client: Running without a keystore
2025-04-19T12:14:29Z  INFO tor_dirmgr: Didn't get usable directory from cache.
2025-04-19T12:14:29Z  INFO arti::socks: Listening on [::1]:9150.
2025-04-19T12:14:29Z  INFO arti::socks: Listening on 127.0.0.1:9150.
2025-04-19T12:14:29Z  INFO tor_dirmgr::bootstrap: 1: Looking for a consensus. attempt=1
2025-04-19T12:14:30Z  INFO arti::reload_cfg: Successfully reloaded configuration.
2025-04-19T12:14:32Z  INFO tor_dirmgr::bootstrap: 1: Downloading certificates for consensus (we are missing 9/9). attempt=1
2025-04-19T12:14:33Z  INFO tor_dirmgr::bootstrap: 1: Downloading microdescriptors (we are missing 8760). attempt=1
2025-04-19T12:14:39Z  INFO tor_dirmgr: Marked consensus usable.
2025-04-19T12:14:39Z  INFO tor_dirmgr: Directory is complete. attempt=1
2025-04-19T12:14:39Z  INFO tor_dirmgr: We have enough information to build circuits.
2025-04-19T12:14:39Z  INFO arti::subcommands::proxy: Sufficiently bootstrapped; system SOCKS now functional.
2025-04-19T12:14:42Z  INFO tor_guardmgr::guard: We have found that guard [scrubbed] is usable.
2025-04-19T12:14:46Z  INFO tor_guardmgr::guard: We have found that guard [scrubbed] is usable.
2025-04-19T12:14:52Z  WARN arti::socks: connection exited with error: error: remote stream closed

torsocks \
  wget -U "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" \
       --recursive \
       --no-parent \
       --execute robots=off \
       --random-wait -w 60 \
       --no-clobber http://--snip--.onion/hoge/