androolloyd/octravpn

OctraVPN is a decentralized VPN, a tool that encrypts your internet traffic and routes it through relay servers run by independent operators. Unlike traditional VPNs where you pay a single company for access, OctraVPN runs on the Octra blockchain, so coordination, payments, and fraud rules are enforced by on chain program code rather than a central authority. The network operates similarly to Tailscale, a mesh style VPN that lets devices connect directly to each other under a shared namespace called a tailnet, rather than routing everything through a single hub. Operators who want to run relay or exit endpoints must stake OU, Octra's native token, as a financial bond. If an operator misbehaves, for example by submitting conflicting payment claims for the same session, their stake can be automatically slashed, meaning it is taken away, by the on chain program. Payments use a two step settlement: when a session ends, the operator claims the bandwidth used, and the client confirms it. Operator earnings are shielded using HFHE, a homomorphic encryption technique that lets amounts accumulate on chain without revealing individual values. Tunnel traffic itself is encrypted using WireGuard, a modern VPN protocol. The codebase is described as v1 production ready, with 218 passing tests and formal verification using TLA+, Lean 4, Tamarin, and Kani covering protocol invariants and cryptographic properties. A v2 design targeting hidden operator identities and encrypted metering is documented but awaits further Octra platform support. The project is written in Rust and organized into several crates: a client CLI, an operator node daemon, a TUN device wrapper, mesh coordination scaffolding, and an admin web interface. The full README is longer than what was shown.