Global Ghost Net links your home server, laptop, and cloud machines into one private network that works from anywhere. There is no account to create, no subscription, and no middleman such as Tailscale or Cloudflare sitting in the path — your devices talk to each other, encrypted end to end.
A closed network for your own machines, protected by your private key. Only devices you approve can join — everyone else is ignored.
An open mesh where devices help bounce encrypted traffic for each other. More participants make it harder to block — a practical way around censorship.
A resilient foundation for personal infrastructure, remote operations, and secure networking.
Connect home servers, workstations, edge hardware, and cloud VPS instances into a single flat private network. Devices find each other automatically across NAT firewalls, home routers, and changing IP addresses without opening router ports or exposing services to the public internet.
Outbound traffic is mathematically divided across multiple independent carrier paths simultaneously. A listener observing any single network link or tap sees only undecipherable random slices. Even if a link is completely severed or drops out mid-stream, remaining paths deliver the full message intact with zero retransmission delay.
All sessions negotiate keys using hybrid post-quantum lattice cryptography (ML-KEM / Kyber-768) combined with classical X25519 curve algorithms. Traffic captured today remains protected against future quantum decryption. Master keys exist only in volatile RAM while active and are never written to disk or swap storage.
No central servers, user accounts, or company databases exist to be compromised, seized, or subjected to downtime. Nodes authenticate each other directly via cryptographic public keys, with no third-party coordinator or vendor middleman in the data path.
Global Ghost Net is a native desktop app with a built-in control window and system tray icon. Download the installer, run it, and flip the connect switch — no terminal, no account, and no setup wizard required.
Flipping the connect switch secures your traffic immediately. The native app lives in your system tray and serves a responsive control panel you can also open from any phone or device on your network.
If you are deploying to a server, Docker container, or want to compile the pure Rust engine yourself:
Global Ghost Net compiles in seconds with zero system dependencies:
On Linux the window uses system GTK/WebKit. Servers, containers and remote boxes without a display can run the headless build, which serves the identical control panel over HTTP at http://localhost:2270.
By default your node joins the open Public Swarm. To create an isolated private mesh, assign a shared Network ID. Nodes without matching network credentials are silently dropped at packet ingress before any handshake occurs.
Use the same Network ID token across your cluster. All data streams inside the network are independently encrypted per session with forward-secret ratchets.
The app window is the control panel: flip the Connect switch and your traffic is protected. Apps that speak SOCKS can also point at the built-in local proxy (on by default), and if you would rather use a browser, the same panel is served at http://localhost:2270. To watch the whole thing work under simulated real-world network conditions, start the Docker demo.
Packet formats and byte-offset tables, kernel-level network simulation benchmarks, cryptographic design specifications, and audit notes all live in the technical documentation.
