Private network infrastructure

No servers.
No logs.
No single point
of failure.

Whiteout is a peer-to-peer privacy network where every user is simultaneously a client and a relay. Traffic routes through directed rings of peers — ephemeral, cryptographically blind, self-healing.

Early access. No spam. Open source from day one.

✓ You're on the list.

Architecture
P2P
Central servers
Zero
Traffic logs
None
Protocol
WireGuard
Architecture

Directed peer rings. Every node is assigned to a ring of 3–5 peers. Traffic flows A → B → C → A. No node knows the full path.

Double-layer WireGuard. An inner tunnel to exit servers keeps the proxy cryptographically blind. An outer session handles NAT traversal. The proxy sees nothing it can read.

Ephemeral broker. A lightweight coordinator assigns rings and tracks heartbeats. It holds IPs and timestamps — never traffic. Session state lives at the exit server, not the broker.

Warm spare failover. Two proxies assigned simultaneously. If one drops, routing continues without renegotiation.

Broker: ring assignment only
A
→
B
→
C
→
A
ring / directed
each hop: encrypted
each node: partial view
broker: no traffic content
exit server: session state only
outer WireGuard (NAT traversal)
inner WireGuard (exit tunnel)
your traffic
Principles
01
No infrastructure to seize
There are no Whiteout servers carrying your traffic. The network is its users. Shutting it down means shutting down the internet itself.
02
Cryptographic blindness by design
Relays cannot read what they carry. The broker cannot see traffic. No single entity has enough context to surveil the network.
03
Open source, always
Trust requires verification. The full protocol and broker implementation are public. Closed-source privacy tools are a contradiction in terms.
04
Built for the places that need it most
Designed to operate under active censorship. Pluggable transports, WebRTC-based hole-punching, and Snowflake-derived rendezvous make it resistant to deep packet inspection.