## 2 The Onion Router Network  
TOR is a network of virtual tunnels that enhances online privacy and security by routing traffic through three randomly selected servers, known as relays. It aims to prevent websites from tracking user locations and protect against local traffic observation. TOR employs various encryption keys for data privacy and authentication. The first relay in a TOR circuit, the \"entry guard\", remains constant for 2-3 months to protect against anonymity attacks. TOR Browser utilizes the TOR network to safeguard privacy and anonymity, preventing ISPs and local observers from tracking online activities. TOR's operation involves thousands of nodes worldwide, managed by volunteers, acting as intermediaries for internet traffic. Traffic is routed through layers of encryption like an onion, ensuring user privacy by routing traffic through intermediary nodes that only know the previous and next node in the chain. Exiting the network occurs through an exit node, which communicates directly with the destination website. End-to-end encryption protects user privacy, allowing only the exit node to read data sent to the destination site. TOR maintains user anonymity by routing traffic through intermediary nodes, making it difficult for observers to identify the traffic's source. However, traffic speed may be slower than conventional internet connections due to redirection through multiple nodes. TOR's association with illegal activities may also lead to authorities' surveillance. The TOR network is a solution for anonymizing internet communications. It uses onion routing, where encrypted communications travel through a network of relay nodes. Each node decrypts one layer of the data before sending it along to the subsequent node in the sequence. The TOR network includes three types of nodes: entry nodes (guard nodes), relay nodes, and exit nodes. Entry nodes encrypt user traffic and route it through the TOR network, with each TOR user randomly selecting an entry node and remaining with it for a period to reduce the chances of traffic-related attacks. Relay nodes are intermediary nodes in the routing chain between the entry and exit nodes, receiving encrypted traffic from the entry one and routing it to the next without knowing its origin or final destination. Exit Nodes receive encrypted traffic from other TOR nodes and send it to the final recipient on the internet, with exit nodes being the last nodes in the routing chain. The TOR network enhances anonymity and privacy by obscuring the complete route of data transmission. It limits each relay's information about the overall path, complicating attempts by observers--such as governments, internet service providers, and hackers--to trace the traffic's origin or destination. However, the TOR network has limitations, such as slower traffic speed due to redirection through numerous nodes and potential surveillance by authorities due to its association with illegal activities. The TOR network's operation revolves around the onion relay, utilizing advanced encryption techniques to route traffic through intermediary nodes while preserving user anonymity. The process involves circuit creation, layered encryption, traffic routing, decryption at the exit node, and data flow response. This intricate system safeguards user privacy by hindering external monitoring and analysis of online activities, thanks to layered encryption and routing through intermediary nodes. TOR network traffic slowdown can result from several technical factors within the open systems interconnection (OSI) model. These factors include physical connectivity issues, congestion, latency, routing delays, transport protocol delays, session negotiation delays, encryption and decryption issues, and application performance issues. Slowdowns can be attributed to combining these factors at different OSI layers. The inherent nature of TOR, involving multiple intermediary nodes and encryption layers, can introduce delays compared to direct internet connections.