Freedom through anonymity.

Privacy-focused linux distribution

Anthrill is a fully-independent, rolling-release Linux distribution focused on privacy through integrated mesh and mix overlay networks — and bypassing censorship in clearnet. We provide network software with native integration of most overlay networks, including I2P, Tor, HypraNet, GNUnet, Yggdrasil, along with network security control tools, stable overlay network autoconfiguration, and documentation aimed at an alternative to the clearnet.

About Anthrill

Internet access should be an abstraction, not a synonym of connection to DNS + TCP/IP + CDNs + browser.

The distribution is designed for anonymous networks: I2P, Yggdrasil, mesh networks. All key components are written in Rust for maximum performance and security. Anthrill is not just an OS — it's an ecosystem of privacy and circumvention tools.

Philosophy

We believe in:

But it's not user-friendly! And slow! It's just overhead on clearnet!

— screams the masses

Anthrill integrates most overlay networks natively — you just need to open your browser and type http://reg.i2p. The nsc routes it without you even noticing.

Why Anthrill?

The clearnet is dying. Here is what's killing it.

Encrypted ≠ Anonymous

TLS encrypts application data, but connection metadata remains visible. Without ECH, the TLS ClientHello exposes the SNI hostname. Censorship systems use these signals to classify or block traffic.

Browser Fingerprinting

Modern websites identify users without cookies — through browser and OS characteristics, screen properties, available APIs, fonts, HTTP headers, and IP addresses. W3C explicitly treats fingerprinting as a privacy threat.

Age Assurance

Access to parts of the Internet increasingly depends on proving your age — through photo ID, facial estimation, mobile operator checks, or digital identity services. The UK and EU are already enforcing this.

Internet Fragmentation

The same domain behaves differently depending on country, ISP, IP address, DNS resolver, and legal jurisdiction. One global Internet is becoming many regional Internets with different rules.

Infrastructure Centralization

The Web looks decentralized but depends on a handful of DNS providers, CDNs, cloud providers, certificate authorities, and anti-bot systems — centralized chokepoints for restriction and disruption.

And we haven't started talking about AI agents yet.

Previously unthinkable laws are being introduced through the Overton window, disguised as "safety" for either children or you. The solution is in overlay networks.

I2P & Tor & Ygg Native

Unlike other privacy-focused distributions that treat I2P as an afterthought, Anthrill is built with I2P as a first-class citizen.

Mesh First

Package management, updates, and communication all work over mesh networks without requiring clearnet access.

Network Killswitch Built-in

The nsc (Network Security Controller) provides granular control over network traffic with TOML-based rules.

No JavaScript and user tracking

Our website, like our distribution, respects your privacy. No tracking, no analytics, no JavaScript required.

Whonix, but better

The project was inspired by the fact that the Whonix distribution is outdated and sluggish, as well as by the increasing censorship of the Internet.

Isolated IP Stack

We isolate the IP stack from the host OS, the gateway to which is the nsc, but we are not limited to Tor, we're more pragmatic.

Technology Stack

Minimal profile. Nothing more, nothing less.

Networking

  • xray
  • gnunet
  • i2pd
  • yggdrasil
  • torsocks
  • hypranet

Core Tools

  • vigilctl
  • busybox-coreutils
  • podman
  • vim
  • mesk + anthrill software

All core components are written in Rust

Providing:

  • Memory safety without garbage collection
  • High performance comparable to C/C++
  • Strong type system preventing bugs at compile time
  • Excellent concurrency support