Explanation

How EdgeVPN works and why it is built this way — architecture, the ledger, and the security model.

Background reading. Nothing here is required to use EdgeVPN, but the security model is worth reading before you deploy it.


Architecture

How EdgeVPN’s p2p network, encryption and ledger fit together.

The security model

What the network token protects, what it does not, and what every mechanism layered on top actually buys you.

The ledger

What the shared ledger stores, and what it deliberately does not.

The authenticated ledger

How ledger entries are signed, owned, versioned and reaped.

Discovery and NAT traversal

Placeholder — how peers find each other and get a connection through NAT. Not written yet.

When not to use EdgeVPN

What the decentralized design costs you, and the cases it is not a good fit for.

Last modified August 4, 2026: Fix/proxy egress ownership (#1066) (cfb9c39)