Mesh Networking & Onion Routing Layer
Overview
The Mesh Networking layer in NØN-OS is the communication backbone for Capsules, Operators, and infrastructure services. It operates as a decentralized, peer-discovery-driven overlay network, eliminating reliance on centralized DNS, fixed bootstrap nodes, or cloud-hosted registries.
To protect operator privacy and enforce network anonymity, the Mesh layer is natively integrated with the Anyone.io Onion Routing Protocol — enabling multi-hop, encrypted tunnels between peers that prevent traffic correlation and metadata leakage.
Mesh Stack Components
Peer Discovery Service (PDS):
Discovers nodes via local broadcasts, mesh gossip, and public key advertisements over the onion network.
Uses a DHT (Distributed Hash Table) stored in-memory across multiple peers, removing the need for centralized peer lists.
Onion Transport Layer (OTL):
Adopts the Anyone.io onion path construction model, where each hop knows only its predecessor and successor.
Packets are encrypted in layers, each stripped at the corresponding hop, ensuring complete unlinkability between source and destination.
Capsule Distribution Protocol (CDP):
Securely fetches Capsule binaries and metadata over onion-routed connections.
Verifies Capsule signatures before storing in the local cache.
Proof Propagation Service (PPS):
Broadcasts Proof-of-Execution and Proof-of-Infrastructure packets to peers.
Leverages onion routing to ensure proofs are unlinkable to the operator's real network address.
Anyone.io Integration
NØN-OS leverages Anyone.io for:
Bootstrap Privacy: First-hop node in the mesh is always reached through an Anyone.io onion relay.
Resilient Multi-hop Paths: If direct mesh paths fail, Anyone.io relays maintain connectivity through fallback onion paths.
Cross-network Peering: Enables bridging between NØN-OS nodes and privacy networks already running on Anyone.io, extending both ecosystems.
zkProof Verification Relays: Certain Anyone.io relays can validate Capsule execution proofs, acting as independent verifiers without learning execution content.
Security & Performance
Forward Secrecy: Every connection uses ephemeral session keys derived per-hop.
Metadata Resistance: No single relay has full visibility into packet routes.
Bandwidth Adaptation: Mesh automatically adjusts hop count and path length based on network congestion.
Offline Tolerance: Nodes can cache Capsules and proofs for later onion-routed sync when connectivity resumes.
Operational Flow
Node Boot: Operator node starts, generates/loads its ed25519 identity, and announces itself over the Mesh.
Path Construction: When contacting a peer, node requests a multi-hop onion path from Anyone.io.
Capsule Fetch/Proof Broadcast: All payloads are wrapped in layered encryption and routed across hops.
Peer Validation: Receiving node validates payload signatures before processing.
Mesh Networking & Onion Routing Integration (with Anyone.io)
The NØN-OS mesh network is a peer-to-peer communication layer that allows Operator Nodes to interconnect without centralized coordination.
It uses libp2p for peer discovery, connection management, and transport abstraction, combined with a custom onion-routing layer to achieve privacy-preserving packet delivery.
Key design principles:
Topology resilience: Mesh nodes auto-heal and re-route traffic around failures.
Traffic unobservability: Onion routing ensures that no single intermediary node can determine both the sender and the recipient.
Proof-enabled transport: Each routing hop optionally embeds a zkProof of transit to allow auditable relay compensation.
Anyone.io integration:
Acts as an additional routing/messaging substrate for high-reliability edge-to-edge encryption.
Bridges NØN-OS traffic into hybrid networks when full mesh connectivity is unavailable.
Enables public/private capsule communication without exposing node IP addresses.
Last updated