{"id":156249,"date":"2026-02-02T11:11:59","date_gmt":"2026-02-02T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/pervyj-publichnyj-reliz-anet-steka-dlya-sozdaniya-zashhishhyonnyh-tunnelej"},"modified":"2026-02-04T11:12:54","modified_gmt":"2026-02-04T09:12:54","slug":"pervyj-publichnyj-reliz-anet-steka-dlya-sozdaniya-zashhishhyonnyh-tunnelej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/pervyj-publichnyj-reliz-anet-steka-dlya-sozdaniya-zashhishhyonnyh-tunnelej","title":{"rendered":"The first public release of ANet, a stack for creating secure tunnels","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The ANet project (ANet Secure Transport Protocol) is developing an alternative stack for establishing secure tunnels, aimed at connecting private networks where standard solutions (WireGuard, OpenVPN) cannot be applied due to various circumstances. The project positions itself not as another WireGuard fork but as a 'Friends-to-Friends VPN', focusing on the use of proven cryptographic algorithms and autonomous operation in 'Dead Man\u2019s Hand' mode. ANet uses its own transport protocol, ASTP (ANet Secure Transport Protocol), which ensures complete end-to-end encryption, resilience to high packet loss, and is indistinguishable from random UDP traffic. The code is written from scratch in Rust and is distributed under the MIT license, with a clear prohibition on including dependencies under GPL 2.0 and 3.0 in the project.<\/p>\n
Main features:<\/p>\n
\n
Utilization of ChaCha20\/Poly1305 for stream encryption, X25519 for Ephemeral DH, Ed25519 for authentication. No legacy algorithms and 'workarounds for compatibility with Windows XP'.<\/li>\n
Transport based on a QUIC-like overlay over UDP, but with its own framing: each packet is wrapped in an encrypted 'envelope' with random padding and jitter (from 0 to N nanoseconds), masking the connection negotiation process as white noise.<\/li>\n
A distributed architecture with an authorization server (anet-auth) that verifies the client fingerprint (SHA256 of the public key based on Ed25519). The tunnel is established via a PSK (pre-shared key), obtained through a 4-phase handshake (DH + double ratchet). If the auth server goes down\u2014 the network continues to operate on preloaded keys (failover to full local mode).<\/li>\n
Supported platforms: Linux (TUN), Windows (Wintun), macOS (utun), Android (VpnService via JNI). There is a GUI on egui (Rust-native), and a TUI for headless servers. Binary builds are provided.<\/li>\n<\/ul>\n