diff --git a/src/allmydata/scripts/create_node.py b/src/allmydata/scripts/create_node.py
index 2273634d6..89c12eee6 100644
--- a/src/allmydata/scripts/create_node.py
+++ b/src/allmydata/scripts/create_node.py
@@ -120,6 +120,10 @@ def write_node_config(c, config):
     c.write("# Tahoe installation.\n")
     c.write("\n\n")
 
+    if config["hide-ip"]:
+        c.write("[connections]\n")
+        c.write("tcp = tor\n")
+
     c.write("[node]\n")
     nickname = argv_to_unicode(config.get("nickname") or "")
     c.write("nickname = %s\n" % (nickname.encode('utf-8'),))
diff --git a/src/allmydata/test/cli/test_create.py b/src/allmydata/test/cli/test_create.py
index 08ce2d83e..cc94f9d2b 100644
--- a/src/allmydata/test/cli/test_create.py
+++ b/src/allmydata/test/cli/test_create.py
@@ -46,6 +46,7 @@ class Config(unittest.TestCase):
         rc, out, err = yield run_cli("create-client", "--hide-ip", basedir)
         cfg = self.read_config(basedir)
         self.assertEqual(cfg.getboolean("node", "reveal-IP-address"), False)
+        self.assertEqual(cfg.get("connections", "tcp"), "tor")
 
     @defer.inlineCallbacks
     def test_node(self):