v0.7.3-alpha - Dual Tor Architecture

🧅🧅 Two Tors Are Better Than One

This release introduces the Dual Tor Architecture - a critical stability fix for Private Message Routing.

🔧 The Problem We Solved

Running Hidden Services AND SOCKS proxy in a single Tor instance causes resource conflicts, resulting in:

• SocksErrorGeneralServerFailure errors
• Intermittent Private Routing failures
• Unstable connectivity

✅ The Solution

Separate Tor instances for separate concerns:

Instance	Purpose	Configuration
tor@default	Hidden Services ONLY	SOCKSPort 0
tor@tor2	SOCKS Proxy ONLY	SocksPort 9050

📋 What's New

• Appendix F: Complete Dual Tor Architecture setup guide
• Disclaimer: Legal and liability information
• Stability Warning: Multi-SMP (10 servers) marked experimental

🔧 Key Fixes

• socks_mode: onion instead of always (major stability improvement!)
• systemd dependencies updated for tor@tor2.service
• Updated architecture diagrams

⚠️ Breaking Changes

Dual Tor Architecture is now required for Private Routing. See Appendix F.6 for upgrade instructions.

📖 Full Changelog

See CHANGELOG in README.md

---

Full Documentation: README.md
Upgrade Instructions: Appendix F.6

v0.7.1-alpha - CRITICAL: Private Routing Fix

SimpleX Private Infrastructure Tutorial v0.7.1-alpha

⚠️ CRITICAL BUGFIX - If you followed v0.7.0-alpha, Private Message Routing was broken!

What Was Wrong in v0.7.0

The SOCKS proxy configuration was placed in the wrong section:

# ❌ WRONG (v0.7.0) - causes Private Routing to fail
[TRANSPORT]
socks_proxy: 127.0.0.1:9050

# ✅ CORRECT (v0.7.1) - Private Routing works
[PROXY]
socks_proxy: 127.0.0.1:9050
socks_mode: onion

Symptom: "Error connecting to forwarding server" / Messages not arriving with Private Routing = Always

How to Fix Existing Installations

Run this on your Pi to fix all SMP instances:

# Fix all SMP servers (original + instances 2-10)
for f in /etc/opt/simplex/smp-server.ini /etc/opt/simplex-smp*/smp-server.ini; do
  [ -f "$f" ] || continue
  sudo sed -i '/^socks_proxy:/d' "$f"
  sudo sed -i '/^\[PROXY\]$/a socks_proxy: 127.0.0.1:9050\nsocks_mode: onion' "$f"
done

# Restart all servers
sudo systemctl restart smp-server smp-server@{2,3,4,5,6,7,8,9,10}

# Verify fix
sudo grep -A3 "\[PROXY\]" /etc/opt/simplex/smp-server.ini

What's Fixed in v0.7.1

• FIXED: SOCKS proxy now correctly in [PROXY] section (not [TRANSPORT])
• FIXED: Private Message Routing works with Tor-only .onion servers
• UPDATED: Section 7.1 with correct configuration
• UPDATED: Appendix A.7 for Multi-SMP setup
• ADDED: Client-side Private Routing configuration (Section 12.3)
• ADDED: Detailed troubleshooting for Private Routing errors

Pre-built Binaries (Unchanged)

Same binaries as v0.7.0-alpha - no need to re-download if you already have them.

File	Version	SHA256
smp-server	6.4.5.1	a25cbe4ac15e13720b6eb2e53c99881b04bab043bb68c3ef9076ab01af398dde
xftp-server	6.4.5.1	4df4b7cb48173c3cf1291097ec85f94e3e237a8f62e1537b23ef0386cb603a49

Recommended Client Settings

After fixing your servers:

Settings → Network & Servers → Private Message Routing:
  → Private routing: Always
  → Allow downgrade: No

Full Documentation

See README.md for complete setup guide.

---

If you're starting fresh: Just follow the updated README, it's already correct.

If you followed v0.7.0: Run the fix script above, then enjoy working Private Routing! 🎉

v0.7.0-alpha - Tutorial + Pre-built ARM64 Binaries

SimpleX Private Infrastructure Tutorial v0.7.0-alpha

Battle-tested guide for self-hosted SimpleX messaging on Raspberry Pi with Tor v3 hidden services.

⚠️ Alpha Release - Functional but still in active development. Feedback welcome!

What's New in v0.7.0

• Pre-built ARM64 binaries included (skip 60min compile time!)
• SOCKS proxy fix for Private Message Routing
• Multi-SMP setup (10 servers) for traffic mixing
• Comprehensive security introduction
• SSH over Tor documentation

Pre-built Binaries (ARM64/aarch64)

For Raspberry Pi 4/5 and other ARM64 devices.

File	Version	Architecture
smp-server	6.4.5.1	aarch64-linux
xftp-server	6.4.5.1	aarch64-linux

Built with: GHC 9.6.3, Cabal 3.10.3.0
Source: https://github.com/simplex-chat/simplexmq (unmodified)

Verification

sha256sum -c SHA256SUMS

Or manually compare:

a25cbe4ac15e13720b6eb2e53c99881b04bab043bb68c3ef9076ab01af398dde  smp-server
4df4b7cb48173c3cf1291097ec85f94e3e237a8f62e1537b23ef0386cb603a49  xftp-server

Quick Install (Binaries)

# Download
wget https://github.com/cannatoshi/simplex-smp-xftp-via-tor-on-rpi-hardened/releases/download/v0.7.0-alpha/smp-server
wget https://github.com/cannatoshi/simplex-smp-xftp-via-tor-on-rpi-hardened/releases/download/v0.7.0-alpha/xftp-server
wget https://github.com/cannatoshi/simplex-smp-xftp-via-tor-on-rpi-hardened/releases/download/v0.7.0-alpha/SHA256SUMS

# Verify
sha256sum -c SHA256SUMS

# Install
sudo install -m 0755 smp-server /usr/local/bin/
sudo install -m 0755 xftp-server /usr/local/bin/

# Verify installation
smp-server -v
xftp-server -v

License

• Tutorial: AGPL-3.0
• Binaries: AGPL-3.0 (unmodified builds from simplex-chat/simplexmq)

Full Documentation

See README.md for complete setup guide.

Roadmap

• Appendix C: Tor v3 Client Authorization
• Appendix D: Vanguards
• Web Admin Panel
• Grafana Monitoring