GNUnet is a next generation, private and anonymous P2P networking stack that rebuilds the internet from the bottom-up on these principles. It exceeds all the other members of the big four (Tor, I2P and Freenet) in scope and design assumptions. Architecturally it is a master-piece that has been undergoing constant development since 2001.
- A very clean modular and documented architecture that allows for adding functionality without encumbering the protocol or limiting future changes
- GNUnet primarily written in C, but the gnunet-java subsystem provides an API for developing extensions in Java. Similar work is being done for Rust.
- A P2P consensus system designed under the assumption that a powerful adversary controls nodes in the network - compared to a centralized directory servers model (Tor)
- Can use TCP,UDP,HTTPS,HTTP and Bluetooth transports
- ECRS is a distributed file store like Freenet but with many improvements including:
- allowing direct sharing of files from the local drive without encrypting and inserting them first.
- can share and mount directories via FUSE
- file download swarming for improved speeds
- global private keyword search for files
- resistance to keyword/unrelated content spam by using trusted namespaces
- resource accounting to reward contributors and limit attacks
- User controllable anonymity levels for traffic routing - allows for more latency sensitive use-cases between peers like VoIP
- An anonymous routing capability that allows for:
- VPN functionality between peers
- IP protocol routing as opposed to just TCP
- traffic exits that allow connecting to the legacy Internet
- By implementing alpha-mixing (mixing traffic of varying latencies) it can provide more cover traffic for resisting traffic analysis
- A strong adversary resistant DHT that handles network churn
- GNS, a secure and memorable name system with query privacy and key revocation
- PSYC2 (WIP) an extensible messaging format that runs on the multicast subsystem to create social networking application (secushare)
- Conversation, a VoIP application
GNUnet in Whonix
GNUnet's capabilities makes it an excellent choice for a planned Whonix notification system, a censorship resistant host of project files and even as a Tor alternative on the gateway in the future. It is currently packaged in Debian but the rapid development cycle makes the versions packaged in stable obsolete and incapable of connecting to the network. See ticket
This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See Conditions for Contributions to Whonix, then Edit! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.