Transparency Report Q2 2025

The second quarter of 2025 has been a period of significant progress for Nothing to Hide, particularly in strengthening our network infrastructure and preparing for future growth in our privacy services.

A major milestone for us was the successful activation of AS215125:AS-CYBEROLOGY. We’re pleased to report that most of our IPv6 traffic is now being routed through this new Autonomous System. This is a crucial first step towards greater control of our network flow. Our immediate next objective is to transition our IPv4 traffic to also be routed through AS215125.

Beyond network routing, we’ve also been actively engaged in acquiring new server infrastructure. This expansion will allow us to significantly broaden the scope and capacity of our privacy services throughout the remainder of 2025. We’re incredibly excited about the possibilities this new hardware unlocks, and you can expect much more detailed information on these exciting developments in upcoming quarterly updates.

On a separate but equally important note, we want to give a shoutout to 1AEO, a fellow large-scale Tor operator, for creating an awesome new relay metrics site. This invaluable resource provides a wealth of metrics that are highly relevant for tracking Tor network and operator health and performance, offering updates multiple times a day.

We also decided to host this great tool ourselves. You can now explore these detailed metrics directly on metrics.nothingtohide.nl. For those interested in self-hosting, the project is open-source and available on GitHub. It’s a fantastic tool that enhances transparency and provides crucial insights for the Tor community, and we’re happy we can contribute to its wider availability.

The metrics used in this report are rounded extrapolated snapshots of the final day of the quarter, to not give away too much specific information.

1 Requests & orders

As a provider of pass-through anonymity services, Nothing to hide receives messages about network traffic originating from or destined for our networks on a daily basis. While the vast majority of these messages are general notices send by automated systems, some of them contain legitimate complaints, requests and/or (court) orders/subpoenas directed at Nothing to hide.

Below we report on the quarterly amount of these messages we get from judicial authorities (courts, judges, juries), law enforcement agencies (LEA), business entities and natural persons.

2 Service report

2.1 Tor relays

Traffic on the Tor network can fluctuate quite a bit and the below metrics are merely snapshots of a day around the end of the quarter.

Note that for these statistics both incoming and outgoing advertised bandwidth are combined (just like Tor network’s metrics).

2.2 Tor DNS requests

DNS requests on the Tor network are resolved by the Tor exit relays. This means that high capacity Tor exit relays can generate a lot of DNS queries. These queries are being resolved by multiple high capacity DNS recursors.

Do note that we don’t log the contents of DNS queries.

2.3 Tor diversity

One of our major goals is to break the GNU/Linux monoculture currently present on the Tor network. Monocultures in nature are dangerous, as vulnerabilities are held in common across a broad spectrum. In a globally used anonymity network, monocultures can be disastrous.

We make the Tor network stronger and more resilient by running all our relays on FreeBSD. Here we report on our ongoing effort to increase operating system diversity on the Tor network. If any Tor operator reading this is interested in running Tor relays on BSD, please contact us and we will gladly help out.

This quarter we’ve seen a slight but very welcome increase in FreeBSD consensus weight share, at the cost of GNU/Linux.

2.4 DDoS attacks

Aside from the occasional (big) DDoS attack, it’s relatively quiet in terms of DDoS attacks.