PLEXUM NETWORK

your device is the server — no cloud required
NodePulse Protocol v4.4 (07/09/2026) — Proof of Concept

// What Is Plexum

Today's internet is locked behind a handful of cloud providers. Publishing anything online requires a domain, a static IP, and recurring costs. For billions of people on phones or behind NAT, running a server is simply not an option.

Plexum flips this model. Any device with an internet connection — an Android phone in a drawer, a laptop, a Raspberry Pi — becomes a publicly reachable server. It runs a local HTTPS server, exposes it through a relay tunnel, and announces its URL to the network with a cryptographic signature. When the URL changes, the node signs and announces the new one. A browser-side recovery system ensures visitors are never lost.

The protocol that powers this is called NodePulse. It handles identity, discovery, gossip propagation, and self-healing — no account, no registration, no centralized authority. Your identity is your RSA key pair, and it persists across URL changes, device restarts, and relay migrations.

how it works
1. Install one command, runs in minutes 2. Generate identity RSA-2048 key pair → unique node_id 3. Start server local HTTPS on port 8080 4. Open tunnel public URL via Cloudflare Tunnel 5. Announce signed node_id|url|ts broadcast to seeds 6. Gossip peers propagate your entry network-wide 7. Heartbeat periodic liveness + directory sync 8. Recovery Service Worker redirects visitors on URL change

No account. No registration. No cloud. Your identity is your key pair.

// Core Features

RSA Identity

Each node has a 2048-bit key pair. Your node_id is the SHA-256 of your public key. Every announcement is signed — impersonation is impossible.

Gossip Sync

Push-pull protocol with fanout 3. The full directory propagates in O(log N) rounds — no central coordinator needed.

Any Tunnel

Cloudflare, Tor, frp, rathole — the protocol is tunnel-agnostic. Your RSA signature is the identity, not the URL.

Auto Recovery

A cached Service Worker detects URL changes and redirects visitors to the new address via seed lookup. No manual intervention.

Zero Config

One install command. Identity is generated, seeds are contacted, gossip starts. No accounts, no manual peer setup.

Minimal Stack

Bash + PHP + OpenSSL + curl. No databases, no containers. Runs on a phone in a drawer.

// Security Model

[+] Identity         node_id = SHA-256(pubkey) — unforgeable without the private key
[+] Signed entries   every announcement carries an RSA-SHA256 signature
[+] Replay guard     older timestamps are rejected — no stale URL injection
[+] Gossip filter    only verified directory entries propagate through the network
[+] Rate limits      per-action caps (announce 5/hr, heartbeat 120/hr)

// Supported Platforms

Android (Termux)

Android 7+ — phone as server
PHP + lighttpd via pkg
~200 MB storage

Windows (WSL2)

Windows 10 (2004+) or Windows 11
Ubuntu 24.04 distro — PHP + nginx + cloudflared
~200 MB download

Both platforms produce identical nodes — same identity, same protocol, same gossip network.

// Diagrams

// Get Started

Join the network in 5 minutes. One command. No account needed.

[ INSTALL NODEPULSE ]     [ VIEW NETWORK ]     [ READ WHITEPAPER ]

Proof of Concept: This is a working prototype. The core protocol (identity, gossip, announce, recovery) is fully functional.