Privacy that pays its own way.

Sailnet is a relay network paid in XNO. Relays carry onion-routed circuits over ordinary-looking HTTPS and are paid per megabyte, directly, on the Nano ledger. No token, no accounts, no company in the middle.

Download Run a relay, earn XNO

Use it

Whole-device VPN. Funds itself with a few thousandths of an XNO.

Small app: connect, wallet, status, relays.
Apple Silicon (M1 and later)Intel

The same app. SOCKS5 proxy for any browser. One-click proxy toggle with WebRTC leak guard.

Android, installed before v0.2.53? Back up your wallet (Settings → Back up wallet), uninstall, then install — once. Earlier builds were signed with a key that changed on every build, so Android will not update over them. From v0.2.53 on, every release installs over the last.

The network right now

—

relays answering, of — registered on the ledger

—

of them offering exit service

—

countries: —

—

XNO per MiB, the median price relays ask

Figures come from the relays themselves, not from us.

Run a relay

Any VPS or home PC. Earnings are swept every 15 minutes to a wallet you control.

docker run -d --name sailnet --restart unless-stopped -p 443:443 -v sailnet:/data \
  ghcr.io/dhyabi2/sailnet relay --register --payout nano_your_wallet_address

Replace nano_your_wallet_address with an address you own before you start it. Without --payout the relay still earns, but into a wallet that exists only on that server — and its seed is the only copy anywhere. Rebuild the box without exporting it and the money is gone for good. With it set, the server never holds more than a few minutes of earnings.

Behind NAT, no port forwarding: sailnode earn --home --payout nano_…

How it works

Circuits

Multi-hop circuits through relays run by strangers, one ChaCha20-Poly1305 layer per hop, fixed-size cells, replay windows. The entry sees you, the exit sees the site, nobody sees both.

Payment

An XNO send to the entry relay is the circuit tag. Signed offline, published by the relay. Nobody extends credit, so there is nothing to ban.

Registry on the ledger

Relays register in Nano state blocks. Public, verifiable, no server to seize. Signed gossip fills in when the ledger is out of reach.

Looks like HTTPS

A Chrome ClientHello, a WebSocket upgrade, a decoy website for anyone else. Traffic shaping tuned against a TLS-in-TLS classifier on the live network.

Bridges

Unlisted entries with secrets, handed out a few per invite, retired when burned.

Rewards

Relays share 10 % of daily earnings with each other, 60 % by seniority and 40 % by bytes served. Cheaper relays get more traffic by construction.