# doxx.net

> doxx.net is an Agentic Defined Network (ADN): a global network built from the ground up for privacy, freedom of speech, and unrestricted internet access, and built to be operated by agents, human or AI, through a self-documenting API. Every component runs on hardware doxx.net corp owns and operates: own servers, own network stack, own IP space (AS16740), own DNS infrastructure, own BGP routing, own security policy. Not leased servers at hosting providers that also monitor the wire. No cloud providers, no third-party resolvers, no rented endpoints. Privacy is not a feature. It is the architecture.

## About

- Creator: Barrett Lyon
- Founded: 2024
- Company: doxx.net corp
- Tagline: Privacy is a right, not a privilege.
- doxx.net exists to provide stable, private networking infrastructure for everyone: people in countries with limited internet freedom, impoverished communities locked out of the real web, AI agents that need private programmable networking, and anyone who wants to feel secure online.

## Platform

- Type: Agentic Defined Network (ADN)
- ASN: AS16740
- IP Registries: ARIN, RIPE
- Network: global. Locations are full clusters on owned hardware with per-packet failover, holding thousands of individual server keys rotating in RAM, not individual leased servers. Live location list: POST https://config.doxx.net/v1/ -d servers=1 (no auth)
- Ownership: our equipment, our network stack, our routing, our security policy. No hosting provider underneath with its own staff, hypervisors or monitoring.
- Backbone: Full-mesh WireGuard topology with BGP routing between all clusters
- DNS: Own authoritative DNS infrastructure with real-time threat intelligence
- TLDs: own domain registry of custom top-level domains independent of ICANN (list_tlds returns the live set)

## Capabilities

- Encrypted WireGuard tunnels terminating on full clusters with per-packet failover
- Thousands of individual server keys rotating in RAM, derived per site
- Private mesh networking between devices (Link All)
- Custom domain registration under doxx.net's own TLDs, independent of ICANN
- Authoritative DNS hosting with DNSSEC
- Real-time DNS threat blocking across a curated blocklist catalog
- Geo-spoofing HTTP/HTTPS proxy
- Dedicated static IPv4 and IPv6 addresses
- TLS certificate signing via private CA
- Per-tunnel firewall rules with device-to-device controls
- Connection profiles with snapshot and restore
- Zero-knowledge account system: no email, no phone, no personal data required

## For AI Agents

doxx.net supports programmatic control via REST API and MCP. Create tunnels, route traffic through any location on the network, register domains, configure DNS, and manage firewall rules programmatically. Every API response includes a `context` field with full endpoint documentation for programmatic consumers. Accounts are token-based with no personal data requirements.

## API

doxx.net is powered by a self-documenting configuration API:

### config.doxx.net

The public configuration API: tunnels, DNS, domains, firewall, proxy, devices, profiles, IP addresses, locations, blocklists, tokens, agents, and account management. GET https://config.doxx.net/ returns the complete, current reference (every endpoint with parameters and roles); nothing here is a fixed count.

Self-documenting: every response includes a `context` field with full endpoint documentation for AI and programmatic consumers.

- Full reference: GET https://config.doxx.net/
- API docs: https://github.com/doxxcorp/config.doxx.net
- Auth: token form parameter (obtained at account creation)
- No-auth endpoints: servers, dns_get_options, list_tlds

## Getting Started

1. Create an account at https://a0x13.doxx.net (requires proof of work, no personal data needed)
2. Subscribe to a plan at https://a0x13.doxx.net/ops/account/subscription
3. Use the auth token for all API calls: curl -s -X POST https://config.doxx.net/ -d 'list_tunnels=1&token=YOUR_TOKEN'

## Site Pages

- https://www.doxx.net/ : Landing page (platform overview, capabilities, infrastructure stats)
- https://www.doxx.net/download/ : Download the app for macOS, Windows, Android, and iOS
- https://www.doxx.net/community/ : Community channels, open source projects, FAQ, social links
- https://www.doxx.net/privacy/ : Privacy policy
- https://www.doxx.net/terms/ : Terms of service

## Links

- Website: https://www.doxx.net
- Download: https://www.doxx.net/download/
- Community: https://www.doxx.net/community/
- Portal: https://a0x13.doxx.net
- Config API: https://config.doxx.net/
- API Docs: https://github.com/doxxcorp/config.doxx.net
- Discord: https://doxx.net/discord
- Support: support@doxx.net
- Privacy: https://www.doxx.net/privacy/
- Terms: https://www.doxx.net/terms/

## Metadata

- Type: SoftwareApplication
- Category: AgenticDefinedNetwork
- Language: en
- Audience: developers, AI agents, privacy-conscious users, people in censored regions

<!--
  The blog article list is appended to this file at build time.

  This file is the PREAMBLE of the served /llms.txt, not the whole of it. It is authored
  company copy: an overview, not a link index. `www/scripts/prerender.mjs` writes
  `dist/www/llms.txt` as these bytes plus a generated `## Blog Articles` section listing every
  published article with its URL and description (see `src/app/prerender/feeds/llmsTxt.ts`).

  So: edit the prose above freely, and do NOT hand-write an article list below. A second copy
  would be served underneath the generated one and would go stale on the next publish, which
  is the drift D7 makes these artefacts generated to avoid. The `## Site Pages` block above is
  static routes only and stays hand-authored, because nothing in the repo derives that list.
-->

## Articles

- https://www.doxx.net/insight/blocking-encrypted-dns-traffic/ : Blocking Encrypted DNS Traffic: What It Means and What to Check. Learn what an encrypted DNS warning means, how blocking affects privacy, and how to check device settings, network controls and DNS fallback.
- https://www.doxx.net/insight/can-website-owners-see-who-visits/ : Can website owners see who visits?. Website owners can see visit data, but usually not your name. Learn how logins, cookies, and identity matches affect privacy and what you can limit.
- https://www.doxx.net/insight/can-you-access-your-nas-from-anywhere/ : Can You Access Your NAS From Anywhere?. Yes, you can access your NAS from outside your home network once you configure remote access.
- https://www.doxx.net/insight/current-security-posture-of-ai-browser-agents/ : AI Browser Agent Security: Current Risks and Practical Controls. AI browser agents remain vulnerable to prompt injection. Learn how scoped access, execution controls, approvals and recovery tests limit exposure.
- https://www.doxx.net/insight/eap-method-wifi/ : EAP methods for Wi-Fi: what they mean and which to choose. Understand EAP-TLS, PEAP and EAP-TTLS, match your enterprise Wi-Fi profile, validate server certificates and troubleshoot authentication failures.
- https://www.doxx.net/insight/firewall-configuration/ : Firewall Configuration: Build, Apply and Test a Least-Privilege Ruleset. Learn how to scope firewall rules, preserve administrative access, test allowed and blocked paths, and review changes before migration.
- https://www.doxx.net/insight/how-to-change-wifi-channel/ : How to Change Your Wi-Fi Channel. Change your router’s Wi-Fi channel, choose settings for each band, test performance, and learn what to do if channel controls are locked.
- https://www.doxx.net/insight/how-to-encrypt-telnet-traffic/ : How to encrypt Telnet traffic. Protect Telnet with compatible IPsec or TLS endpoints, require encryption, check path coverage, and test that plaintext access is blocked.
- https://www.doxx.net/insight/how-to-find-ip-address-of-printer/ : How to Find the IP Address of a Printer. Find your printer's IP address using its display, a network report, Windows or Mac settings, or your router. Confirm the address before printing.
- https://www.doxx.net/insight/how-to-fix-slow-dns-lookup/ : How to Fix Slow DNS Lookup. Measure DNS lookup delays on Windows, macOS and Linux, identify the slow layer, apply a targeted fix, and retest without breaking private access.
- https://www.doxx.net/insight/how-to-lower-ping/ : How to Lower Ping in Online Games. Lower gaming ping by testing Ethernet, pausing heavy transfers and comparing game regions. Diagnose lag spikes and know when to contact your ISP.
- https://www.doxx.net/insight/how-to-reduce-packet-loss/ : How to Reduce Packet Loss. Reduce packet loss with controlled Wi-Fi, Ethernet and congestion tests. Learn how to measure results, apply targeted fixes and escalate persistent issues.
- https://www.doxx.net/insight/network-connectivity/ : Network connectivity: how it works and how to check it. Network connectivity lets devices exchange data. Learn how wired and wireless links work and how to check reachability, DNS and application access.
- https://www.doxx.net/insight/on-path-attack/ : On-path attacks: how interception works and how to protect your traffic. An on-path attacker intercepts traffic between devices. Learn how attacks work, what HTTPS protects, which warning signs matter, and how to respond.
- https://www.doxx.net/insight/prevent-llm-from-accessing-confidential-data-in-development/ : How to Prevent an LLM from Accessing Confidential Development Data. Keep confidential data out of LLM context with isolated workspaces, sanitized inputs, retrieval authorization, tool permissions and boundary tests.
- https://www.doxx.net/insight/rdp-port/ : RDP Port: Default, Custom Listener and Gateway Ports. RDP defaults to TCP 3389 and can also use UDP 3389. Learn gateway ports, how to check the listener, and how to change it with recovery steps.
- https://www.doxx.net/insight/secure-internal-communication/ : Secure Internal Communication: Protect Messages, Calls, Files, and Services. Learn how to secure internal messages, calls, files, and services with encryption, access controls, device protection, policies, and practical checks.
- https://www.doxx.net/insight/ssh-specify-port/ : Specify an SSH Port When Connecting. Use ssh -p to connect on a specific port. Learn how to save the port in SSH config, select ports in scp and sftp, and check failed connections.
- https://www.doxx.net/insight/subnet-cheat-sheet/ : Subnet Cheat Sheet: IPv4 Masks, Host Counts and Boundaries. Look up IPv4 subnet masks, usable hosts and wildcard masks. Calculate subnet boundaries, size address blocks and compare IPv6 prefix capacities.
- https://www.doxx.net/insight/this-site-can-t-provide-a-secure-connection-fix/ : How to Fix “This Site Can’t Provide a Secure Connection”. Check the error code, compare browsers and networks, and troubleshoot clock, browser, or HTTPS settings without bypassing certificate warnings.
- https://www.doxx.net/blog/welcome-to-the-agentic-networking-era/ : Welcome to the Agentic Networking Era. Barrett Lyon introduces doxx.net and Agentic Defined Networking: private networks that people and AI agents can build and operate.
- https://www.doxx.net/blog/cgnat-was-an-emergency-fix/ : CGNAT was an emergency fix. We made it the default, and it neutered the Internet.. How carrier-grade NAT conserved IPv4 addresses, made direct connections harder and changed what peers and builders can do online.
- https://www.doxx.net/blog/welcome-to-the-agentic-network/ : OMG, are we having fun building the agentic networking future.. See how doxx.net combines its own infrastructure, an encrypted mesh and in-house AI to connect people and agents.