261

Peerweb: Decentralized website hosting via WebTorrent

https://github.com/omodaka9375/peerweb

Fun! I wish WebTorrent had caught on more. I've always thought it had a worthy place in the modern P2P conversation.

In 2020, I messed around with a PoC for what hosting and distributing Linux distros could look like using WebTorrent[1]. The protocol project as a whole has a lovely and brilliant design but has stayed mostly stagnant in recent years. There are only a couple of WebRTC-enabled torrent trackers that have remained active and stable.

1. https://github.com/leoherzog/LinuxExchange

13 hours agoxd1936

I think the issue has generally been that web torrent doesn't work enough like the real thing to do its job properly. There are huge bit torrent based streaming media networks out there, illicit, sure, but its a proven technology. If browsers had real torrent clients we would be having a very different conversation imo

I don't remember the web torrent issue numbers off the top of my head, but there are a number of long standing issues that seem blocked on webrtc limitations.

12 hours agor14c

I think we still have the same blocker as we had back when WebTorrent first appeared; browsers cannot be real torrent clients and open connections without some initial routing for the discovery, and they cannot open bi-directional unordered connections between two browsers.

If we could say do peer discovery via Bluetooth, and open sockets directly from a browser page, we could in theory have local-first websites running in the browser, that does P2P connections straight between browsers.

11 hours agoembedding-shape

Could you run some kind of hybrid DHT where part of it was Webrtc and part was plain HTTP(S) / WebSocket?

There are some nodes (desktop clients with UPNP, dedicated servers) that can accept browser connections. Those nodes could then help you exchange offers/answers to give you connections with the Webrtc-only ones, and those could facilitate offer/answer exchanges with their peers in turn.

It'd be dog-slow compared to the single-udp-packet-in, single-udp-packet-out philosophy of traditional mainline DHT, but I don't see why the idea couldn't work in principle.

I think a much bigger problem is content discovery and update distribution. You can't really do decentralized search because it'd very quickly get sybil-attacked to death. You'd always need some kind of centralized, trusted content index, but not necessarily one hosted on a centralized server. If you could have a reliable way to go from a pubkey to the latest hash signed by that pubkey in a decentralized way, + E.G. a Sqlite extension to get pages on-demand via WebTorrent, that would get you a long way towards solving the problem.

4 hours agomiki123211

That was you ask exists; it updates through a version counter. It just works on mainline DHT btw.

3 hours agonamibj

If a tracker could be connected to via WebRTC and had additional STUN functionality, would that suffice? Are there additional WebRTC limitations?

> they cannot open bi-directional unordered connections between two browsers.

Last I checked, DataChannels were bidirectional

9 hours agoSeattle3503

Yes, but it's STUN that sucks. If the software ships with a public (on the internet) relay/STUN server for connecting the two clients, it won't work if either aren't connected to the internet, even though the clients could still be on the same network and reach each other.

9 hours agoembedding-shape

That seems like a nonissue for the purposes of this discussion though, in terms of user uptake. Tiktok and Facebook and other websites aren't exactly focused on serving to people on the same network.

9 hours agojychang

/? STUN: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

There is a Native Sockets spec draft that only Chrome implements;

"Direct Sockets API": https://developer.chrome.com/docs/iwa/direct-sockets :

> The Direct Sockets API addresses this limitation by enabling Isolated Web Apps (IWAs) to establish direct TCP and UDP connections without a relay server. With IWAs, thanks to additional security measures—such as strict Content Security Policy (CSP) and cross-origin isolation— this API can be safely exposed.

Though there's UPNP XML, it lacks auth for port forwarding permissions. There's also IPV6.

Similar: "Breaking the QR Limit: The Discovery of a Serverless WebRTC Protocol – Magarcia" https://news.ycombinator.com/item?id=46829296 re: Quick Share, Wi-Fi Direct, Wi-Fi Aware, BLE Beacons, BSSIDs and the Geolocation API

5 hours agowesturner

"If browsers had real torrent clients we would be having a very different conversation imo"

The elinks text-only browser has a "real" torrent client

6 hours ago1vuio0pswjnm7

Was there ever a web-based Jigdo?

11 hours agobluedino

I'm glad to see this was not unexpectedly fast to load. Would not want to upset those distributed expectations! I wonder if there's a business model in selling speed on a robust network that is on average too slow. Is there anyway to incentivize more nodes through micropayments distributed from people who pay for their site to be served faster?

Ultimately I guess the distributed web is felled by economics thus far.

31 minutes agokeepamovin

> Enhanced security with DOMPurify integration!

> XSS Protection - All HTML sanitized with DOMPurify > Malicious Code Removal - Dangerous tags and attributes filtered > Sandboxed Execution - Sites run in isolated iframe environment

I don't think that super makes sense. You probably just want the iframe sandbox and not remove all js. Or ideally put the torrent hash as the subdomain to use same origin policy.

3 hours agobawolff

I think one of the values of (what appears to be) AI generated projects like this is that they can make me aware of the underlying technology that I might not have heard about - for example WebTorrent: https://webtorrent.io/faq

Pretty cool! Not sure what this offers over WebTorrent itself, but I was happy to learn about its existence.

13 hours agokamranjon

Every time I try these they never work, including this one.

I’m not sure what the value prop is over just using a torrent client?

Maybe when they’re less buggy they’ll become a thing.

9 hours agoDJBunnies

I'm planning to eventually launch an open source platform with the same name (peerweb.com) that I hope will be vastly more usable, with a distributed anti-abuse protocol, automatic asset distribution prioritization for highly-requested files, streaming UGC APIs (e.g. start uploading a video and immediately get a working sharable link before upload completion), proper integration with site URLs (no ugly uuids etc. visible or required in your site URLs), and adjustable latency thresholds to failover to normal CDNs whenever peers take too long to respond.

I put the project on hiatus years ago but I'm starting it back up soon! My project is not vibe coded and has thus far been manually architected with a deep consideration for both user and site owner expectations in the web ecosystem.

7 hours agoSephr

If it actually worked i could certainly see the value prop of not making users download a separate program. Generally downloading a separate program is a pretty big ask.

3 hours agobawolff

This is cool - I actually worked on something similar way back in the day: https://github.com/tom-james-watson/wtp-ext. It avoided the need to have any kind of intermediary website entirely.

The cool thing was it worked at the browser level using experimental libdweb support, though that has unfortunately since been abandoned. You could literally load URLs like wtp://tomjwatson.com/blog directly in your browser.

13 hours agomcjiggerlog

Can sanitation be disabled? I.e. can this be used to access static websites as-is?

44 minutes agolikiiio

I wonder if these colors are a kind of a watermark that are hardcoded as system instructions. Almost all slopware made using claude have the same color palette. So much for a random token generator to be this consistent

9 hours agomisir

Yep, and I refuse to use sites that look like this. Lovable built frontend/landing pages have a similar feel. Instant lost of trust and desire to try it out.

9 hours agoIhateAI

Its interesting - AI has a certain style. You can see it in pictures and even text content. It does instantly get my guard up.

3 hours agobawolff

That's interesting - do you think because it's familiar to you?

Would it be the case for folks who don't have any idea what Lovable is.

Familiar UI is similar to what Tailwind or Bootstrap offers, do they do something different to keep it fresh?

Average internet users/consumers are likely used to the default Shopify checkout.

7 hours agoj45

Its probably more of a me "problem". But I'm sure there are plenty of others that share my sentiment. It doesn't really have anything to do with it being familiar, familiar can be good, but what I'm talking about is a familiar ugliness and lack of intention.

The Stripe or Shopify checkout is familiar, but it only became familiar because it was well designed and people wanted to keep using it.

Also when its obvious someone used an LLM, it bleeds into my overall opinion of the product whether the product is good or not. I assume less effort was put into the project, which is probably a fair assumption.

6 hours agoIhateAI

https://en.wikipedia.org/wiki/Mode_collapse

Ask any modern (post-GPT-2) LLM about a random color/name/city repeatedly a few dozen times, and you'll see it's not that random. You can influence this with a prompt, obviously, but if the prompt stays the same each time, the output is always very similar despite the existence of thousands of valid alternatives. Which is the case for any vibecoded thing that doesn't specify the color palette, in particular.

This effect is largely responsible for slop (as in annoying stereotypes). It's fixable in principle, but there's pretty little research and I don't see big AI shops care enough.

7 hours agoorbital-decay

Emojis on every line are an AI tell. The times I do use AI (shhhh...) I always remove them and tweak the language a bit.

8 hours agokaranSF

Before LLMs became big, I used emojis in my PRs and merge requests for fun and to break up the monotony a bit. Now I avoid them, lest I be accused of being a bot.

8 hours agonetule

Isn't it mostly ChatGPT that does that?

Grok almost never uses emojis.

5 hours agorudhdb773b
[deleted]
9 hours ago

This is pretty interesting!

I think serving video is a particularly interesting use of Webtorrent. I think it would be good if you could add this as a front end to basically make sites DDOS proof. So you host like a regular site, but with a JS front end that hosts the site P2P the more traffic there is.

13 hours agosroerick

I think it is very difficult (and dangerous to the host) to serve user-uploaded videos at scale, particularly from a moderation standpoint. The problem is even worse if everyone is anonymous. There is a reason YouTube has such a monopoly on personal video hosting. Maybe developments in AI moderation will make it more palatable in the future.

13 hours agoNewsaHackO

The "host" is the user in this case. Every user that watches the video, shares the video. Given that discovery doesn't appear to be a part of this platform, any links would undoubtedly be shared "peer-to-peer" as well, so if you aren't looking at illegal things and don't have friends sending you illegal things to watch, it's perfectly safe.

6 hours agot-3

There is PeerTube for video content.

12 hours agostanac

Cool. Some people complained about broken demos, I uploaded the mdwiki.info [1] website unaltered and seems to work fine [0]. MDwiki is a single .html file that fetches custom markdown via ajax relative to the html file and renders it via Javascript.

[0]: https://peerweb.lol/?orc=b549f37bb4519d1abd2952483610b8078e6...

[1]: https://dynalon.github.io/mdwiki/

11 hours agolittlecranky67

Why is it called MDwiki? It's clearly not a wiki.

9 hours agoTimwi

The idea is to host it on github, and people send changes to the content via pull requests (vs. editing like in wikipedia). There is no backend, just plain files.

2 hours agolittlecranky67

Sure, in a sense, but “wiki” actually just means “quick”.

8 hours agojmercouris

I can't imagine that Peerweb has much in the way of stopping certain types of material from being uploaded.

12 hours agoSLWW
[deleted]
9 hours ago

Smaller site likely have a smaller footprint

8 hours agoj45

[flagged]

11 hours agoestimator7292

This response feels disproportionate to the comment's comment

10 hours agoericyd

And also just… misguided? I don’t particularly think of neo-Nazis when I think of people who advocate against CSAM.

10 hours agorainonmoon

We all know that CSAM is one of the first things that gets uploaded to these sorts of platforms.

If advocating against CSAM = Fascism then I'll be the first to say that i'm a nazi facist. o7

10 hours agoSLWW

In high school, an acquaintance of mine made the website "e-imagesite.com" [1]. It was a very easy-to-use image uploading site (and honestly less irritating than ImageShack and predated imgur). It was just being hosted on HostGator, I believe, and written in PHP and used jQuery.

I believe he had to eventually shut it down because people kept uploading horrifying stuff to it, and it was never even that popular. Child porn and bestiality were constantly being uploaded and I don't think he liked having to constantly report stuff to the FBI.

After building a proper comment section for my blog (including tripcodes!), I've thought about making my own "chan" site, since I think that could be fun, but I am completely terrified of people uploading horrible stuff that I would be forced to sift through and moderate pretty frequently. User submissions open up a huge legal can of worms and I am not sure that's a path that I'm willing to commit myself going down.

When there's strong anonymity, I suspect that this problem could be even worse.

It's a little depressing, because decentralized and distributed computing is one of the most interesting parts of computer science to me, but it feels like whenever I mention anything about it, people immediately assume piracy or illicit material.

[1] https://web.archive.org/web/20090313063155/http://www.e-imag...

9 hours agotombert
[deleted]
6 hours ago

Yeah, I’m fully in support of a decentralised web but the internet is old enough now that being naive about this stuff has become equivalent to being maliciously incompetent. Without designing for things like community or self-governance and moderation, you’re designing for trouble. Thinking about ways to healthily cultivate a peer-to-peer web doesn’t make someone a Nazi, it makes them a responsible member of a community.

9 hours agorainonmoon

you can't stop someone from verbally describing certain objectionable material, therefore we should regulate the medium thru which sound travels and suck up all the oxygen on the planet. it's the only way to save the children

10 hours agob00ty4breakfast
[deleted]
10 hours ago
[deleted]
7 hours ago

love this. I've been working on something similar for months now

https://metaversejs.github.io/peercompute/

it's a gpgpu decentralized heterogeneous hpc p2p compute platform that runs in the browser

12 hours agognarbarian

Nice, I clicked on the first demo, and I got stuck at connecting with peers.

I like the idea though.

13 hours agoBrouteMinou

What do you all think of the chances that we have decentralized AI infrastructure like this at some point?

9 hours agofooker

OT: Can someone vibe-code Geocities back to life?

12 hours agocyrusradfar

Check out neocities.org

12 hours ago800xl

you made my life. Thank you life long internet friend.

11 hours agocyrusradfar

That would take forever. If you can get the domain I'll hand code it in perl.

12 hours agoipaddr

<marquee><blink>Neat!!</blink></marquee>

11 hours agoawesome_dude

give me the tokens.

12 hours agoAreShoesFeet000

Similar project I vibe coded a few weeks ago: "Gnutella/Limewire but WebRTC".

https://github.com/RickCarlino/hazelhop

It works, though probably needs some cleanup and security review before being used seriously (thus no running public instance).

11 hours agorickcarlino

Somebody has to revive Nullsoft WASTE p2p from 2003 tho

9 hours agobricss

i wish stuff like this was more like double-click, agree, and use. they always make it complicated to where you're spending time trying to understand if you should continue to spend more time on this.

12 hours agojournal

I tried this, the functional "Functionality test page:" is stuck on "Loading peer web site... connecting to peers". I can't load any website from this.

https://imgur.com/gallery/loaidng-peerweb-site-uICLGhK

12 hours agologicallee

Yes, none work for me. They either don’t have peers, or the few ones are on a very slow network.

12 hours agodavidcollantes

None of the demo sites work for me.

Probably needs more testing and debugging.

12 hours agodana321

In its own reimagined way from what’s possible in 2026, this could kick off a new kind of geocities.

13 hours agoj45

Good, important idea. Unfortunately bad, low effort vibe coded execution

12 hours agodcreater

Still a shipped idea, driven by someone. The author has some other interesting ideas.

7 hours agoj45

Useless if it takes > 5 sec. to load a page

11 hours agodpweb

You never lived the 90's

10 hours agoTuringTest

lol.

Not only did it take > 5 seconds to load a page, images were progressively loaded as fast as two at a time over the next minute or so - if there were no errors during transfer!

6 hours agoalfiedotwtf

This is probably going to be taken down like my site was that used Web Torrent.

dropclickpaste.com is for sale. kruhft.at.gmail.com

4 hours agokruhft

Nice idea. Shame absolutely everything about the website screams AI slop.

6 hours agowackget

I feel like if it were combined with federated caching servers it would actually work. Then you would have persistence and the p2p part helps take load off popular content. There are now P2P databases that seem to operate with this. Combining the best of both worlds.

11 hours agoUptrenda

[dead]

9 hours agomaximgeorge

[dead]

3 hours agoTaoWay

[dead]

8 hours agovyr

I don't get it, I upload my files to your site, then I send my friends links to your site? How is this not a single point of failure?

a month agoelbci

IPFS [1] requires a gateway unfortunately (whether remote or running locally). If you can use content idents that are supported by web primitives, you get the distributed nature without IPFS scaffolding required. Content is versioned by hash, although I haven't looked to see if mutable torrents [2] [3] are used in this implementation. Searching via distributed hash tables for torrent metadata, cryptographically signed by the publisher, remains as a requirement imho.

Bittorrent, in my experience, "just works," whether you're relying on a torrent server or a magnet link to join a swarm and retrieve data. So, this is an interesting experiment in the IPFS, torrent, filecoin distributed content space.

[1] https://ipfs.tech/

[2] https://news.ycombinator.com/item?id=29920271

[3] https://www.bittorrent.org/beps/bep_0046.html

13 hours agotoomuchtodo

You don't hear much these days about IPFS, but I can remember one big problem with it was illegal content and how to deal with it.

9 hours agoamelius

This isn't my site, nor do I have any opinions on the implementation here. I do however find the idea of serving web pages via torrent interesting.

a month agodtj1123

p2p storage as in torrent or IPFS or whatever is the part that we kinda' solved already. Serving/searching/addressing without the (centralized) DNS is still missing for a (urgently needed) p2p censorship resistant internet. Unfortunately this guy just uses some buzzwords to offer nothing new - why would I share links to that site instead of sharing torrent magnet links?

a month agoelbci

Thinking about this a little bit... could we use a blockchain ledger as an authoritative source for DNS records?

User's can publish their DNS + pub key to the append-only blockchain, signed with their private key.

Use a torrent file to connect to an initial tracker to download the blockchain.

Once the blockchain is downloaded, every computer would have a full copy of the DNS database and could use that for discoverability.

I have no experience with blockchains or building trackers, so maybe this is a dumb idea.

12 hours agorecursivegirth

Look into IPFS and ENS.

12 hours agosoulofmischief

This is a great point.

One issue I've had with IPFS is that there's nothing baked into the protocol to maintain peer health, which really limits the ability to keep the swarm connected and healthy.

13 hours agosroerick

I use to add webseeds but clients seem to love just downloading it from there rather than from my conventional seeding.

Some new ideas are needed in this space.

11 hours agotheendisney

You make a good point.

24 days agodtj1123
[deleted]