> We could, but if we keep them in pip, then anyone can hack on it without needing a vagrant setup? Or any user wanting to setup torperf on their server should hopefully be able to just install the pip dependencies?

I'd prefer installing dependancies from a package manager than pip. Let's add the packaged dependancies to the apt-get command and the rest to requirements.txt; and also add all the required dependancies to the README -- so that anyone who is setting torperf on a non-debian/ubuntu system can just install it using pip.