AnoNet

Content sourced from Wikipedia, licensed under CC BY-SA 3.0.

AnoNet is a decentralized, friend-to-friend network that uses VPNs and BGP routers to connect people while keeping identities private. Its main goal is to protect freedom of speech by letting participants anonymously host IPv4 and IPv6 services. Rather than building anonymity into a single app, AnoNet aims to create a network layer that can support many different applications and services.

How it works
- Anonymity by design: You know only your direct neighbors. Your IP isn’t tied to your real identity beyond those direct connections. Other users see an IP in the 21.0.0.0/8 range, but that doesn’t necessarily reveal who you are. If you publish something that links to you, other documents or requests on the network could potentially be tied to that identity.
- Routing and structure: There is no automatic hiding of your IP to everyone in the network, but you can run standard friend-to-friend tools inside AnoNet, which makes it harder to detect usage. The network uses VPN links for router-to-router and router-to-user connections.
- VPNs and tools: Any robust VPN can be used, such as IPsec (FreeS/WAN, Greenbow), OpenVPN, or SSH tunneling. Different links can use different VPN programs.

Addressing and routing
- Private addressing: AnoNet uses a private IPv4 space (originally 1.0.0.0/8, later 21.0.0.0/8) to avoid conflicts with the wider Internet. The 21.0.0.0/8 space is currently unused on the public Internet, which helps reduce clashes.
- Routing: BGP allows any node to advertise routes, helping the network stay connected even if some paths fail. If the network grows large, it can be split into smaller groups or updated to other routing approaches.
- Scale and limits: BGP has a finite number of possible routes and identifiers, so at very large sizes AnoNet might need changes or new mechanisms. The network can also drop problematic routers or peers to maintain health.

Anonymity in practice
- The model assumes you’ll be known to your immediate peers, and you’ll be identified by your IP only within that local connection. Anyone not directly connected to you sees only a general IP range, which may not be tied to you.
- While traffic analysis can reveal some details, users can mitigate this with their own precautions. If someone misbehaves, peers can block or drop their tunnel to protect the network.

In short, AnoNet aims to provide a flexible, privacy-friendly network layer that supports anonymous hosting and communication across many applications, using VPNs and distributed routing to keep participants connected while preserving their right to speak freely.