What you’ll need
- A working Anyone Relay (software or Anyone Router hardware)
- Your router’s admin access (web UI or mobile app)
- The relay’s local IP address (e.g., 192.168.1.50)
- A public IPv4 address (or a plan to request one from your ISP—see the CGNAT section)
Step‑by‑step: Universal port‑forwarding flow
These steps mirror Anyone’s official guide (summarized and simplified), including the default port and verification. (Anyone Docs)
- Find your router’s admin page
On Windows, run ipconfig and look for the Default Gateway. On macOS/Linux, use the one‑liner in the docs to fetch your gateway. Type that IP (often 192.168.1.1 or 192.168.0.1) into your browser and log in. (Anyone Docs) - Reserve a local IP for the relay (recommended)
Create a DHCP reservation for the relay so its IP won’t change. This prevents broken forwards after reboots. (Vendor‑specific steps vary; see brand resources below.) - Create the port‑forward rule
- External (WAN) Port: 9001 (or your chosen port)
- Internal (LAN) IP: your relay’s local IP (e.g., 192.168.1.50)
- Internal Port: 9001 (or the same port you set in the relay config)
- Protocol:TCP/UDP (Both) Save/apply, then reboot your router if needed. (Anyone Docs)
Tell the relay which port to use
In your anonrc, set:
ORPort <YourChosenPort>
- (9001 is the default, but any unused port is fine.) (Anyone Docs)
- Verify outside reachability
- Use an open‑port checker (e.g., CanYouSeeMe) while the relay is running. (Anyone Docs)
- Or use Nyx to confirm the ORPort self‑test goes green; a yellow/red WARN suggests a missing port‑forward or CGNAT. (Anyone Docs)
Router‑specific pointers (quick links)
Anyone’s docs collect official port‑forwarding guides from major brands—use these when you want step‑by‑step screens for your exact model: Linksys, Netgear, TP‑Link, D‑Link, Asus. (Anyone Docs)
- eero (app‑based): Open eero app → Settings → Network settings → Reservations & Port Forwarding, then add the relay and port 9001. (support.eero.com)
- Google Nest Wifi / Google Wifi (app‑based): Use Google Home → Favorites → Port management, select IPv4 or IPv6, choose your device, and add the internal/external port(s). (Google Help)
Tip: Mesh systems (eero, Nest Wifi) don’t have a traditional web UI—everything happens in the mobile app.
Router‑specific pointers (quick links)
Anyone’s docs collect official port‑forwarding guides from major brands—use these when you want step‑by‑step screens for your exact model: Linksys, Netgear, TP‑Link, D‑Link, Asus. (Anyone Docs)
- eero (app‑based): Open eero app → Settings → Network settings → Reservations & Port Forwarding, then add the relay and port 9001. (support.eero.com)
- Google Nest Wifi / Google Wifi (app‑based): Use Google Home → Favorites → Port management, select IPv4 or IPv6, choose your device, and add the internal/external port(s). (Google Help)
Tip: Mesh systems (eero, Nest Wifi) don’t have a traditional web UI—everything happens in the mobile app.
IPv4 vs IPv6 on Anyone
Anyone enables IPv6 by default. If your ISP doesn’t provide IPv6 or you prefer to quiet the “no IPv6 address” notices, you can set IPv4‑only in anonrc. (This is optional; it’s fine to leave IPv6 on if your ISP supports it.) (Anyone Docs)
Troubleshooting: When the port won’t open
- CGNAT (Carrier‑Grade NAT)
If your router’s WAN IP is private (10.x.x.x, 100.64–100.127.x.x, 192.168.x.x), inbound port‑forwards cannot work because you are not directly on the internet—your ISP is NATting you. Confirm by comparing the WAN IP in your router with a “What’s my IP” site. If they don’t match, you’re likely behind CGNAT. The fix is to ask your ISP for a public (dynamic) IPv4; some may offer a static IP at extra cost. (Anyone Docs) - Double NAT
If you have an ISP modem/router plus your own router, you may be double NATed. Put the ISP box in bridge mode (or add a forward on both devices), then test again. - Firewall on the relay
Ensure your OS firewall allows inbound traffic on your chosen port (e.g., allow 9001/TCP+UDP or disable the host firewall if you’re testing). Anyone’s docs include a separate firewall section if you need to harden later. (Anyone Docs) - Verify with Nyx (and logs)
Install Nyx (sudo apt-get install nyx) and watch for the green “ORPort reachable” confirmation. Yellow/red WARNs usually mean a missing forward or CGNAT. (Anyone Docs)
Getting paid: How Anyone Relay rewards work
Yes—when you run a relay at home over a normal consumer internet connection you can earn rewards. The flow looks like this:
- Register for Rewards
Add your EVM wallet address to your relay’s anonrc (via ContactInfo) and connect that wallet to the Anyone Protocol Dashboard to claim the relay and start redeeming rewards. (Anyone Docs) - Locking tokens (non‑hardware only)
If you’re not using Anyone’s hardware, you’ll need to lock 100 $ANYONE per relay, with a 180‑day lock and 14‑day unstake window. Anyone hardware relays are exempt from the lock. (Anyone Docs) - Redeeming & airdrops
Operators claim Sepolia testnet $ANYONE in the dashboard; mainnet $ANYONE is then airdropped weekly in proportion to your claimed testnet rewards (subject to prerequisites described below). (Anyone Docs) - Current distribution & prerequisites
At the time of writing, the project distributes 2,500 tokens/day: 80% to all relays (30% of that purely for uptime) and 20% to verified hardware relays. Rewards are weighted by consensus weight (higher bandwidth and longevity help). For non‑hardware relays, the wallet must also hold 100 mainnet $ANYONE per registered relay prior to each airdrop. Hardware relays are exempt from that prerequisite. (Anyone Docs)
Reminder: Anyone’s site notes that, like any crypto asset, $ANYONE carries inherent risk. Only participate with what you can afford, and read the terms. (anyone.io)
Security checklist (home operators)
- Strong credentials for your router and relay; disable remote router admin from WAN. (Anyone Docs)
- Keep the relay binary updated and don’t firewall outbound connections (the network needs your relay to be reachable by others). (Anyone Docs)
- Run an exit relay only if you know what you’re doing. Anyone recommends not running an exit from home/private premises; it needs extra controls and care. This article covers non‑exit (middle) relays. (Anyone Docs)
Brand‑by‑brand quick reference
When in doubt, consult your brand’s official guide or the consolidated list in Anyone’s docs. (Anyone Docs)
- Linksys / Netgear / TP‑Link / D‑Link / Asus: Use the router’s web UI → find Port Forwarding under Advanced/Security → forward TCP/UDP 9001 to the relay’s IP. (Exact menus differ by model; see the official guides linked from Anyone’s docs.) (Anyone Docs)
- eero:App → Settings → Network settings → Reservations & Port Forwarding → add the relay → Open a Port (9001) → save. (support.eero.com)
- Google Nest Wifi / Google Wifi:Google Home → Favorites → Port management → pick IPv4 (or IPv6 as needed) → select your relay → add internal & external port(s) (9001). (Google Help)
Common questions
Do I have to use port 9001?
No. 9001 is the default ORPort, but you can choose another unused port—just match your router rule and anonrc. (Anyone Docs)
TCP only or UDP too?
Anyone’s router guide recommends forwarding TCP/UDP (both) for the ORPort rule. (Anyone Docs)
How do I confirm it’s working?
Run the relay, check the port with an external tester, and/or open Nyx to see a green “ORPort reachable” message. (Anyone Docs)
I’m on 5G/fixed‑wireless and the test never turns green.
You’re likely behind CGNAT. Ask your ISP for a public IPv4 address; CGNAT blocks inbound port‑forwards. (Anyone Docs)
Can I earn without buying the hardware?
Yes—software relays can earn. But they require locking 100 $ANYONE per relay and meeting the mainnet token prerequisite at snapshot/airdrop time. Hardware relays are exempt from those two requirements. (Anyone Docs)
Fast setup checklist
- Reserve a static DHCP IP for the relay on your router
- Forward TCP/UDP 9001 from WAN to the relay’s IP
- Set ORPort <port> in anonrc and restart the service
- Verify via Nyx or an external port checker
- Register on the Rewards Dashboard, claim your relay, and (for non‑hardware relays) satisfy the lock & token prerequisites before airdrops (Anyone Docs)