Every browser you've used for the past decade — Chrome, Edge, Brave, Opera, Vivaldi, Arc — runs Blink. Firefox runs Gecko. p2p-studio runs Servo: Mozilla's experimental Rust-native layout engine, architected for parallel CSS/layout evaluation and memory safety by construction.
Servo is not a product. It's a research engine. p2p-studio is one of the earliest production integrations — windowed via winit, headless for CI, with a full WebDriver API on top.
The protocol-router crate resolves every URL at navigation time — no extensions, no manual proxy settings. Each protocol dispatches to its own purpose-built gateway running as a local service inside the browser process.
Onion-routing over I2P tunnels. Every .i2p domain routes through a full in-process I2P router — not a proxy to an external i2pd instance.
P2P file system from the Dat ecosystem. Drives are HAMT-indexed, replicated over I2P for anonymity, and served locally through a built-in Axum HTTP gateway.
Content-addressed files over IPFS, with an I2P SAM transport layer so your IPFS activity never exposes your IP to peers in the swarm.
Browse and interact with the AT Protocol social graph natively. The embedded Aurora Locus PDS means your identity and data live in the browser, not on a third-party server.
Magnet links resolve through the built-in magnet-gateway — no separate torrent client required. Coming soon: WebTorrent over WebRTC.
Standard TLS clearnet is supported but not required. Set allow_clearnet = false in config to disable it entirely and route everything through I2P and P2P protocols only.
Other browsers treat I2P as an external dependency — configure i2pd, point the proxy, hope it's running. p2p-studio forks Emissary (the Rust I2P implementation) directly into dc-i2p-router, audited and integrated as a first-class subsystem with 983 unit tests.
Full SSU2 wire protocol with PATH_CHALLENGE / PATH_RESPONSE address migration. Handles network interface changes without dropping sessions.
TCP-based I2P transport with Noise XX handshake and ChaCha20-Poly1305 framing. Both transports run concurrently.
The browser's upper layers (IPFS, Hyperdrive, PDS) talk to the embedded router via SAM, the same API used by external i2pd — so protocol integrations are portable.
Omits direct IP addresses from RouterInfo. Publishes only SSU2 introducer addresses, so the router participates in the network without advertising its location.
15 findings documented and resolved: timing-safe comparisons via subtle::ConstantTimeEq, Zeroize on secret material, zero raw == on cryptographic data.
Force-republish, lease set management, and wait_for_integration() ensure I2P is ready before any outbound connection attempt — no silent "tunnel not built yet" failures.
Most AT Protocol clients rely on Bluesky's PLC directory and hosted PDS. p2p-studio ships a full Personal Data Server — Aurora Locus — with 30+ modules covering everything from DID resolution to OAuth 2.0 DPoP to cross-PDS federation. Your posts, follows, and blobs go into a local key-value store you control.
The PDS can serve over I2P — your Bluesky-compatible social presence is reachable as a .b32.i2p address, no domain registrar required.
IPFS and Hyperdrive are powerful for content addressing and P2P file sharing — but they both expose your IP to peers. p2p-studio routes both over I2P, so your reads and writes stay anonymous.
A P2P file system built on Hypercore append-only logs. Each drive has a 32-byte ed25519 keypair. Files are stored in a HAMT for efficient sparse access, and blocks are replicated to peers over I2P SAM sessions.
Content-addressed IPFS over an I2P SAM transport. Peers exchange blocks using I2P destination keys instead of IP addresses — so the swarm sees your I2P identity, never your network location.
p2p-studio exposes privacy controls as first-class config values, not buried settings menus. All are reflected in the protocol router at navigation time — not as a best-effort filter.
Setting allow_clearnet = false makes the protocol router return Blocked("reason") for any https:// or http:// URL. No clearnet traffic leaves the process.
A proxy gateway runs on :8118 and a PAC file server on :8119, routing clearnet-configured requests through I2P automatically. Works with any OS proxy setting.
A configurable VPN subnet (default 10.8.0.0/24) lets p2p-studio act as a system-level I2P gateway for other applications on the device. Documented for iOS, Linux, and macOS.
A built-in KeyVault stores per-site cryptographic keys, and an AddressBook maps human-readable names to I2P B32 destination keys — so friend.i2p stays meaningful across sessions.
The embedded I2P router can run in hidden mode — publishing only introducer addresses to the network, never a direct IP. The router participates fully while remaining location-anonymous.
Your AT Protocol DID, signing key, and repo are stored in an embedded redb database inside the browser. No third-party PDS required to participate in the AT Protocol social graph.
p2p-studio is in active development. Early access is open to developers, researchers, and privacy advocates who want to help shape the first Rust-native multi-protocol browser.