Running a Snowflake proxy: low-commitment bandwidth for censored Tor users
A Snowflake proxy is the Tor network's lowest-commitment volunteer role: no server to rent, no configuration files to defend, no exit policy to explain to an ISP. Install a browser addon, embed a badge on a website, or run a small daemon, and censored users can borrow a slice of your bandwidth to reach Tor. The project's volunteer page describes the mechanism plainly: Snowflake lets people connect where Tor is blocked 'by routing your connection through volunteer proxies located in uncensored countries'. The proxies are meant to be disposable — a tab left open, an addon idling, a container humming on a spare machine.
What a Snowflake proxy actually is
Snowflake is a pluggable transport, a way of disguising Tor traffic so that censors see something innocuous. It is built on WebRTC, the protocol behind browser video calls, so a connection looks, as the volunteer page puts it, like an 'audio or video call instead'. The design descends from Flashproxy, an earlier volunteer-relay experiment; the project repository on the Tor Project's GitLab still calls it a pluggable transport using WebRTC, inspired by Flashproxy. The vocabulary trips people up, so the roles deserve precision. The bridge — the Tor entry point — is run by the Tor Project, not by you. A volunteer's proxy is a short-lived relay hop ferrying encrypted data between a censored client and one of those bridges; we covered how Snowflake bridges work in an earlier piece. The practical consequence is that a proxy never carries traffic to the open web. There is no exit role and no exit-policy surface. Asked on the forum whether clients could point proxies at arbitrary destinations, a Snowflake developer answered that they cannot: proxies talk to the broker and to Tor bridges, nothing else.How censored users reach it
Users do not have to hunt for volunteers. Tor Browser, Orbot on Android and Ricochet Refresh ship with Snowflake built in and ready to use: a user in a censored region picks Snowflake among the bridge options and the client does the rest. A broker matches clients to available proxies over domain-fronted signaling that is itself difficult to block. When Russian ISPs blocked most Tor access routes on 1 December 2021, developers fixed a protocol flaw that had allowed censors to detect Snowflake, and it began working in Russia while other routes stayed blocked. In September 2022, censorship during the Iranian protest wave pushed Snowflake use in Iran up roughly fourfold within days.Ways to volunteer
Four routes in, per the volunteer page and recent Tor releases:- A browser addon for Firefox, Chrome and Edge, described as the easiest method: the icon turns green when a blocked user connects through you.
- A website badge that visitors keep open, spinning up snowflakes for as long as the tab lives.
- A standalone proxy for desktops and servers, installed from Debian or FreeBSD packages, a Docker image, an Ansible role, or a snowflake-proxy binary compiled with Go.
- On Android, Orbot's Kindness Mode and, since April 2026, a dedicated Snowflake Volunteer app built with Tor's anti-censorship team and distributed through F-Droid and Google Play.
What it costs you
Bandwidth, mostly. One operator on the project forum measured roughly 1 GB relayed per hour on each of thirty Docker proxies in early 2023, alongside 360 to 400 connections per hour; after a server-side fix doubled average use, hourly peaks reached 9 GB. A capacity flag caps how many clients a standalone proxy serves at once. RAM deserves a glance on small machines: the same thread reports containers outgrowing 8 GB during a since-fixed leak, then settling at 1-2 GB serving 100-200 users. The browser routes cost almost nothing — a snowflake exists only while its tab stays open, so the commitment is attention rather than capacity. And because the proxy only shuttles data toward Tor bridges, the relayed traffic is never yours in any practical sense.The limits
Snowflake has honest constraints. NAT type matters: the guide tells candidates to test with a STUN tool and look for address-independent mapping, behaviour that symmetric NATs — common on mobile and office networks — do not offer. The pool swells and shrinks across the day as tabs open and close and time zones turn. The transport has also met targeted interference: Tor's metrics portal records increased failure to bootstrap through Snowflake from China starting in January 2021, cause unknown, and the blocking waves in Russia and Iran each forced emergency protocol work. Volunteers should read it as a moving front, not a solved problem.Does one snowflake matter?
The pooled effect is measurable. During 2022, Snowflake grew from about 5,000 to 75,000 users, and by the end of that year roughly 2 percent of all Tor users connected through it, according to the operations team. In the first half of 2026 the broker saw an average of about 146,000 unique volunteer proxy IPs checking in daily, roughly a third via Orbot's Kindness Mode. The volunteer page's live counter reads 127,599 snowflakes and counting. The team's fundraising post sums up why every borrowed tab helps:Servers and bandwidth don't come for free.For anyone who cannot run a relay or an obfs4 bridge, the community documentation names this as the alternative: running a Snowflake proxy is a great way to donate your bandwidth. It is volunteering sized for a browser tab — modest, intermittent and, multiplied across a hundred thousand strangers, load-bearing for people whose access to the open internet depends on it.