> Both of your preferred solutions will have much
> higher performance overheads than any container
> like solution (OpenVz, Vserver, lxc...).
concurrent number of open sockets. ip stack tuning parameters. other
technical constraints that make networking on these "light overhead"
container systems unworkable. the very design trade offs they make to
support larger numbers of contains per host directly reduce the
networking performance and capacity of any singular container/vm.
you must have at least X resources to participate in the Tor network
as a router. these crippled systems don't cut it.