ZeroServer.org: The Future of Sovereign Infrastructure is Mesh Networking & Edge Compute
Open Source is Overtaking the SaaS World in the Age of AI — Build on Sovereign Mesh, Distributed K3s Edge & Container VMs Without Rent-Seeking or Vendor Lock-In
The future of sovereign infrastructure is mesh networking and distributed edge compute—not centralized SaaS rent-seeking. As open source overtakes the legacy SaaS world in the age of AI, ZeroServer.org (ZS) provides the 100% free, self-hostable foundation across four core projects: FreshCity (Deno 2 + Fresh 2 SSR & 3D WebGL spatial web), ZeroServer Mesh (K3s edge orchestration, Kuma mTLS service mesh, OpenJev inline LLM/microservice routing, and BVS1 sovereign object storage), ZeroServer Enterprise (WebRTC P2P calling, gRPC chat, Sovereign Container VMs powering ATS1 Interactive Brokers TWS & Nowkast nk1 Shared Desktops, and verifiable clearing), and ZeroServer OPSEC (ZeroServerPlatform CRD operator, continuous ISO 27001/HIPAA compliance, and HSM guardrails)—seamlessly extensible via DataAsset.Store (DAS) for Intel® TDX hyperscaler confidential computing and unified enterprise support.
Why Mesh Networking & Edge Infrastructure Replace the SaaS World in the Age of AI
Centralized SaaS platforms trap enterprise and government data behind per-seat rent-seeking, opaque APIs, and foreign cloud jurisdictions. ZeroServer.org (ZS) provides the 100% free open-source mesh and edge foundation—and DataAsset.Store (DAS) extends it for Intel® TDX Confidential Computing on global hyperscalers, bi-directional in-transit PII token-swapping, shared container VMs over Nowkast (nk1) Group Chat, and screen-capture compliance retention under one unified support envelope.
Federate bare-metal edge nodes, on-premise racks, and cloud zones under a single zero-trust Kuma mutual-TLS service mesh and declarative ZeroServerPlatform CRD.
Inline LLM and microservice router in @zs/mesh that pairs with DAS to swap sensitive PII/PHI in transit with deterministic HSM vault tokens before hitting external models.
Built-in @zs/desktops xRDP + Guacamole container VMs—proven in ATS1 Interactive Brokers TWS and connected to Nowkast (nk1) Group Chat Shared Desktops.
Extend ZeroServer onto AWS, GCP, and Azure using hardware Intel® TDX confidential VMs, with automated screen-capture retention vaults for SEC 17a-4, HIPAA, and ISO 27001.
FreshCity
Web ArchitectureHigh-performance universal SSR frontend framework & 3D WebGL UI engine
3D WebGL Orbit City Engine
Procedural 3D city canvas with animated vehicle traffic, walking pedestrian particles, atmospheric ascent, and holographic planetary orbit transitions.
Island Architecture & Modular Dock
Zero client-side JS overhead by default. Interactive islands hydrate strictly on-demand. Floating sci-fi modular dock launches instant collaboration tools.
Strudel Algorithmic WebAudio Synth
Live procedural progressive house synthesizer running 100% in client WebAudio with interactive chord progression controls and zero external sample dependencies.
ZeroServer Mesh
Infrastructure & Data PlaneCloud-native cluster orchestration, intelligent service mesh routing, sovereign storage & telemetry
Kuma mTLS Mesh & OpenJev Inline Router
Global Control Plane managing cross-zone edge and cloud meshes, intelligent inline LLM & microservice routing, automated mutual TLS (mTLS), and native extensibility for DAS In-Transit PII Token-Swapping.
Multi-Zone Microservices Fabric
High-throughput bidirectional service bridges across identity, communications, clearing, storage, and AI specialist workloads with strict zone isolation.
BVS1 Centralized Storage & DB
Multi-tenant sovereign blob and object storage with strict tenant namespace isolation, zero cross-tenant leakage, and cryptographically verified access logs.
ZeroServer Enterprise
Commerce & CommunicationsDecentralized WebRTC video, support chat, content moderation, advertising control & transaction clearing
WebRTC P2P Video & Signaling
Ultra-low latency peer-to-peer audio/video conferencing with automated session exchange and NAT traversal.
Support Chat & Moderation
Service mesh-backed enterprise chat with cross-channel broadcast fanout, automated toxic content moderation, and consensus scoring.
Fintech Clearinghouse
Four-stage clearing state machine (INITIATED → CLEARING → CLEARED → SETTLED) with cryptographic payment receipts.
ATS1 Trading & IB TWS VM
Real-time algorithmic trading engine backed by the desktop-quant container VM running live Interactive Brokers TWS / Gateway connectivity.
Sovereign Container VMs (@zs/desktops): From ATS1 IB TWS to Nowkast (nk1) Group Chat Shared Desktops
xRDP + Apache GuacamoleZeroServer includes a built-in container VM subsystem (packages/desktops) streaming isolated Ubuntu/XFCE desktop pods over HTML5 WebSockets via Apache Guacamole (guacd). Proven in production inside ATS1—where the desktop-quant (ib-gateway) VM provides live Interactive Brokers TWS / Gateway execution—this architecture connects directly into Nowkast (nk1) Group Chat & Zero-PII Sandboxes for multi-party shared terminals and extends via DAS Visual Screen-Capture Retention Vaults.
ZeroServer OPSEC
Compliance, Security & Pen TestingContinuous ISO 27000/27001 ISMS matrix, HIPAA safeguards, automated pen testing harnesses & read-only guardrails
Continuous ISO 27001 ISMS Matrix
Real-time auditing across Annex A controls: Cryptographic Controls, Network Security, and Asset Management with zero compliance drift.
Automated Pen Testing Harness
Automated security suites verifying protection against injection, cross-site scripting, request forgery, and packet tampering.
HSM Custody & DAS Intel® TDX Extension
Emergency read-only tamper-proofing switch and client-held HSM keys guarantee zero platform custody—extending via DataAsset.Store (DAS) onto global hyperscalers using hardware Intel® TDX confidential VMs.
Register for Canonical Gitea Instance & Technical Architecture Access
To prevent automated internet scrapers and reconnaissance bots from harvesting port topologies, OpenAPI schemas, and cluster telemetry, ZeroServer.org serves all canonical source code and technical documentation exclusively to registered Gitea developers.
Direct browser & HTTPS Git clone access to ZeroServerMeshAdmin/denofresh across all 6 workspace packages with automatic SSO injection.
Complete CRD specifications, Kuma Service Mesh policies, multi-zone gRPC protobuf schemas, and air-gapped deployment runbooks.
Interactive OpenAPI 3.1.0 explorer, live endpoint execution, and BVS1 Sovereign Database bucket inspector (/catalog).
Zero technical attack surface exposed to unauthenticated bots. All developer registrations are audited via the ZeroServer CRM identity ledger.