Architecture Overview

VeilNet Architecture Overview

VeilNet is composed of three main building blocks: Master, Guardian, and Conflux, working together to form a post-quantum secure, self-healing overlay network.

• Master (NATS Super Cluster)
  The Master layer is a globally distributed NATS super cluster that acts as the control-channel message broker. All Conflux nodes and Guardian services use this fabric to exchange control messages, coordinate routing, propagate health signals, and negotiate ephemeral multi-hop paths. No user traffic flows through Master – it only carries encrypted control and coordination events.
• Guardian (Stateful API Microservices)
  Guardian is a set of API microservices that expose VeilNet’s management, authentication, and orchestration capabilities. Instead of traditional cache-based stateless APIs, Guardian uses VeilNet’s no-caching memory sync protocol to keep instances in sync, allowing them to behave as stateful API servers while remaining horizontally scalable. Guardian provides:
  • A memory sync protocol for real-time state propagation
  • SQL ORM-backed persistence
  • RESTful APIs for planes, identities, policy, and billing
• Conflux (Edge Node + Client Stack)
  Conflux runs on user devices, servers, and containers to join them into a Plane. It consists of:
  • A System Service Wrapper that integrates with the host OS
  • The Anchor Protocol, VeilNet’s proprietary transport and control protocol for establishing encrypted, multi-hop, post-quantum secure channels
  • A TUN interface that injects and captures IP packets from the host or container network
  
  On top of the service layer, Conflux provides:
  • A Flutter-based UI framework for a unified cross-platform experience
  • The Conflux App as the primary user-facing client
  • An Auth Portal that handles login, social OAuth, and account management, all backed by Guardian

Together, these components create an intelligent, post-quantum overlay where the control plane (Master + Guardian) and data plane (Conflux + Anchor + TUN) are tightly integrated but cleanly separated, enabling VeilNet to remain secure, adaptive, and easy to operate at scale.