New: a threat-model-first guide to choosing your network defence, plus the nym-smoldvpn dVPN package and nym-swizzle sender hygiene.
Network
Threat Model
Configurations
Unprotected

Unprotected on the open internet

❌IP hidden · P1@L2❌Req-unlink · P2@L2❌Local net · P1@L3L❌Global net · P1@L3G✅Fast
L2The destination❌P1❌P2

Sees

  • Real client IP
  • Every request
  • All request timing and content

Residual / countermeasure

  • Everything is exposed with no adversarial effort. This is the baseline network protection must improve on.
L3LLocal network observer

Sees

  • Endpoints, timing and volume of the exchanged flows
L3GGlobal network observer

Sees

  • Endpoints, timing and volume (collapses with L3L on a direct connection)

Cons / mitigations

  • Needs IP hiding, then timing and content discipline

Fit

  • Baseline only: offers no protection

Verdicts and the latency implied by the path are an illustrative model, not measured values.

Choose a DefenceVPN