29 of 30 Sprints Complete 840+ Tests Passing

The Unstoppable Edge Network

A blockchain-powered global edge network. Decentralized CDN, kernel-level DDoS protection, and Wasm edge compute — owned by the community, not a corporation.

Launch App Read Whitepaper
Smart Contracts
5
Deployed on Devnet
Test Coverage
840+
Tests Passing
Target Uptime
99.999%
Five Nines
Development
97%
29 of 30 Sprints

Core Advantages

Why AEGIS?

Decentralized infrastructure that eliminates single points of failure

Censorship Resistant

No single point of control. Content served from thousands of independent nodes worldwide ensures your data stays accessible, always.

IPFS content addressing + P2P distribution

Lightning Fast

BGP Anycast routing connects users to the nearest edge node. Rust-powered Pingora proxy delivers <60ms TTFB with zero-downtime upgrades.

Enterprise Security

eBPF/XDP DDoS protection at kernel level. OWASP-compliant WAF in isolated Wasm sandboxes. Memory-safe Rust throughout.

Community Owned

$AEGIS token on Solana. Node operators earn rewards for uptime. DAO governance gives the community full control.

Edge Compute

Deploy custom Wasm modules to the edge. Route-based dispatch pipelines chain WAF, auth, rate limiting, and custom logic.

Content Delivery

Decentralized CDN

Content delivery without central control. Deploy static sites for free.

1
Initialize
aegis-cdn init
2
Deploy
aegis-cdn deploy
3
IPFS Distribution
Content-addressed
4
Global Edge
Nearest node serves

IPFS Storage

Content stored on IPFS with content-addressed CIDs. No central server can block or censor your content.

Multi-tier CDN fallback: local cache, IPFS node, public gateways

Free Static Hosting

Deploy HTML, CSS, JS, and images without $AEGIS tokens. No subscription fees for static content.

Optional: Filecoin pinning for guaranteed long-term storage

Security by Default

Every deployment includes WAF protection and bot management. No extra configuration needed.

Route-based module pipelines for custom security rules

Terminal
# Initialize a new project
$ aegis-cdn init my-website
# Deploy to the decentralized CDN
$ aegis-cdn deploy public/
IPFS CID: QmXyz...abc123
Gateway: https://ipfs.io/ipfs/QmXyz...
Deployment complete!

Domain Name System

Decentralized DNS

Authoritative DNS with DNSSEC, DoH/DoT support, and intelligent geo-routing

Authoritative DNS

Full authoritative DNS server built on Hickory DNS (Rust). Support for A, AAAA, CNAME, MX, TXT, NS, SOA, CAA, and SRV records.

Just point your nameservers to AEGIS and we handle the rest

DNSSEC Signing

Cryptographic signatures on all DNS responses using Ed25519. Automatic key generation, RRSIG records, and DS record export.

One-click DNSSEC enablement with automatic re-signing

Encrypted DNS

DNS over HTTPS (DoH) and DNS over TLS (DoT) support for privacy. ISPs and attackers cannot snoop on your DNS queries.

RFC 8484 compliant DoH endpoint at /dns-query

Intelligent Geo-Routing

DNS queries automatically return the IP of the nearest healthy edge node

GeoIP Resolution
MaxMind GeoLite2 database for accurate client location
Health-Aware Routing
Automatic failover to healthy nodes
Low Latency
Haversine distance returns 3 nearest edge nodes

Full Management API

Complete REST API for DNS zone and record management with TypeScript SDK

Zone Management
Create, update, delete zones with SQLite persistence
Record CRUD
Full record management with TTL and priority support
Analytics
Query statistics, per-zone metrics, and traffic insights
Terminal — DNS Management
# Create a new DNS zone
$ aegis-cli dns create-zone --domain example.com --proxied
Zone created: example.com
Nameservers: ns1.aegis.network, ns2.aegis.network
# Add an A record
$ aegis-cli dns add-record -d example.com -n www -t A -v 192.168.1.1
# Enable DNSSEC
$ aegis-cli dns enable-dnssec --domain example.com
DNSSEC enabled!
DS Record: example.com. IN DS 12345 15 2 abc123...

Architecture

Technology Stack

Memory-safe architecture designed to eliminate failure modes

The Data Plane

High-performance request processing optimized for speed and reliability

Pingora Proxy (Rust)
Multi-threaded reverse proxy with work-stealing, connection reuse, TLS 1.3
DragonflyDB Cache
Multi-threaded Redis replacement with 25x throughput
Cilium (eBPF/XDP)
Kernel-level DDoS mitigation at NIC driver (nanosecond latency)
Coraza WAF (Wasm)
OWASP CRS-compatible firewall in isolated sandbox

The Control Plane

Orchestration and state management with fault isolation

K3s (Lightweight K8s)
Single <100MB binary for managing the global fleet
FluxCD + Flagger
GitOps config sync, canary deployments with auto-rollback
CRDTs + NATS JetStream
Eventual consistency, active-active replication
Solana Blockchain
Node registry, staking, rewards, DAO governance on-chain

Benchmarked with Criterion

Performance

Sub-microsecond response times across every critical path

1.5μs
WAF Analysis
66x faster than target
65ns
Route Matching
Pre-compiled regex
23ns
CRDT Increment
Distributed state sync
103ns
Cache Key Gen
DragonflyDB ops

Sprint 25 Benchmark Results

Criterion benchmarks on Apple M-series, compiled with --release

WAF Clean Request1.51 μs66x
WAF SQLi Detection2.44 μs41x
Route Match (Regex)65 ns15x
Route Match (Exact)18 ns55x
CRDT Increment23 ns43x
CRDT Merge46 ns21x
Cache Key Gen103 ns9x
Cache-Ctrl Parse269 ns3x
All targets exceeded. Benchmarks run on every PR via CI. View Benchmark Code →
Pre-compiled Regex

Route patterns compiled once at load. 1,770x faster than runtime compilation.

Lock-Free CRDTs

Conflict-free replicated data types for sub-microsecond distributed state.

Rust + Wasm

Memory-safe code with zero-cost abstractions. WAF in isolated Wasm sandbox.

Token Economy

$AEGIS Economy

Sustainable tokenomics powering the decentralized edge

Service Consumers
Developers & Enterprises
Pay $AEGIS for CDN, DDoS protection, edge compute
DAO Treasury
Smart Contract Vault
Distributes rewards, funds development, governance
Node Operators
Hardware Contributors
Earn rewards for uptime, performance, staking

Consumers pay fees → Treasury distributes → Operators earn rewards → Ecosystem grows

1B
Total Supply
Fixed supply, deflationary mechanics
100
Min Stake
AEGIS tokens to run a node
7d
Cooldown
Unstaking period for security

Smart Contracts on Solana Devnet

$AEGIS Token
SPL Token Program
9uVLmgqJz3nYcCxHVSAJA8bi6412LEZ5uGM5yguvKHRq
Node Registry
On-chain registration
4JRL443DxceXsgqqxmBt4tD8TecBBo9Xr5kTLNRupiG6
Staking
Security bonds & rewards
EpkFmmfbR8HVDyJ1EZoWjM9WFuVDt4kXmVTvgkzxvr1N
Rewards
Performance distribution
8nr66XQcjr11HhMP9NU6d8j5iwX3yo59VDawQSmPWgnK
DAO Governance
Proposals, voting, treasury
9zQDZPNyDqVxevUAwaWTGGvCGwLSpfvkMn6aDKx7x6hz

All contracts deployed and verified on Solana Devnet. Click any address to view on Solana Explorer.

Progress

Development Roadmap

Building the future of decentralized edge infrastructure

Phase 1: Foundation

COMPLETE

Sprints 1-6 | 100% Complete

5 Smart Contracts Deployed
840+ Tests Passing
HTTP/HTTPS Proxy with Caching
CLI Tool Integration

Phase 2: Security & State

COMPLETE

Sprints 7-12 | 100% Complete

eBPF/XDP DDoS Protection
WAF with Body Inspection
P2P Threat Intelligence
CRDTs + NATS JetStream

Phase 3: Edge Compute & Governance

COMPLETE

Sprints 13-19.7 | 100% Complete

Wasm Edge Functions Runtime
Route-based Module Dispatch
IPFS/Filecoin CDN
DAO SDK, CLI & dApp

Phase 4: Advanced Security & Launch

92% COMPLETE

Sprints 19-30 | Cloudflare Parity + Mainnet | Target: June 2026

TLS Fingerprinting (JA3/JA4)
JavaScript Challenges
Behavioral Analysis & Trust
Enhanced WAF (OWASP CRS + ML)
API Security Suite (JWT/OAuth)
Performance Benchmarking
Security Audit & Hardening
Mainnet Launch & TGE

Join the Decentralized
Edge Revolution

Help build the future of internet infrastructure. Run a node, earn rewards, and be part of the community-owned network.

View on GitHub Read Documentation