> ## Content Index
> Fetch the complete content index at: https://www.signalful.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# If It's Not Your Equipment, You Can't Set Policy
- URL: https://www.signalful.com/if-its-not-your-equipment-you-cant-set-policy/
- Published: 2026-10-05T13:49:00.000Z
- Updated: 2026-10-07T05:15:39.000Z
- Description: The man who built one of the first DDoS shields now runs a private internet on hardware he owns. Barrett Lyon says an IP address is not your driver's license.
- Author: Signalful Editorial
- Tags: Builders, DoxxNet, Barrett Lyon, Security, #sf-0039, #yt-bmDrbHOh7Bo, #Import 2026-10-06 15:50

Barrett Lyon is the founder of DoxxNet, a privacy network that runs its own mesh, peer-to-peer apps and AI on hardware it owns. He previously founded Prolexic, one of the first cloud DDoS protection services and now Akamai Prolexic, along with DefenseNet, which became F5 Silverline, and BitGravity, an early video CDN. A former penetration tester with a philosophy degree, he created the Opte Project map of the internet, two pieces of which are in MoMA's permanent collection. A book was written about his pursuit of Russian extortionists in the Prolexic years, and he co-founded the Mayan Warrior camp at Burning Man. These signals are from Barrett Lyon's interview with Joel de la Garza on the a16z podcast.

1. **The Network Doesn't Do Identity.** Lyon says governments, including US states with know-your-customer rules, keep asking the network to solve an identity problem it can't solve. "An IP address is not your driver's license." Age checks and content restrictions make sense, he argues, but at a different place in the stack. He cites a recent case where France required blocking 100-plus piracy sites, the provider chose to block France entirely, and a major carrier that geo databases misclassified as French lost service. Any misclassification drops you inside someone else's policy.
2. **Whose Servers Are Those?** Most VPNs, in Lyon's description, are entry and exit points: software installed on a server leased from a landlord. A "no logs" policy means little until you ask who owns the machines, who leased them, and what that landlord does with the data. That question pushed DoxxNet to build its own infrastructure around the world, because "if it's not your equipment, you can't set policy." He calls bare-metal-as-a-service a "creepy underbelly," and notes the carriers and interconnects past your cage add another layer of policy you don't control.
3. **A Parallel Internet.** DoxxNet uses VPN protocols only as the way in. Inside sits a mesh network with 196 domains that don't exist on the public internet, where users can register domains, lease IP or mesh addresses and set policy in milliseconds. Everything is exposed through APIs, so an agent could build an entire network on it. Lyon also wants to remove carrier-grade NAT, which he calls one of the biggest stains on the internet because it blocks applications from talking to each other directly.
4. **Your Phone as the Server.** WhatsApp, Signal, iMessage and Telegram ("by the way, Telegram's creepy") look like you're sending something to a friend, Lyon says, when you're sending it to a server the friend pulls from. DoxxNet's calling, video, chat and file apps run peer to peer across the mesh, so your phone becomes the server for your friend. With no middleman, files have no size limit, and he describes sending 20 GB with 3 or 4 layers of post-quantum encryption. Accounts need no phone number, email or name, only a puzzle to prove you're human.
5. **Hide the Cryptography.** When two DoxxNet users connect, the app says "invite friend," and underneath it runs a cryptographic key exchange between them. De la Garza's lesson from PKI is that if you tell people it's PKI, it won't work. Lyon goes further: no public infrastructure is involved, only two people deciding they trust each other. That mutual trust is what lets their phones talk directly over the mesh.
6. **Twelve People, No Sysadmin.** DoxxNet built 26 sites around the world with redundant routing in what de la Garza puts at about 6 months, with about 12 people involved in total. It has no network administrator and no sysadmin; AI runs operations, on DoxxNet's own metal, and no context or inference data goes to the big AI companies. Lyon frames the small headcount as security: "we don't have a thousand employees with access to this network." Since the worst breaches tend to come from insiders, a tiny corporate footprint shrinks the blast radius.
7. **It's All of Them Combined.** A wealthy, controversial individual once asked Lyon why it mattered if someone knew he bought underwear on target.com. Lyon's answer: the danger is the sum of trackers across every app and site, stored and sold by unknown parties. Combined, they reveal whether you drink coffee, when you wake up, your income and where you shop. Now "you can take all that and just dump it into an LLM and say, 'Tell me about this person.'" Blocking trackers like WhatsApp's telemetry domain or Apple's telemetry rarely breaks an app or website, so DoxxNet strips them at the network level.
8. **Data Center Myths.** Lyon has visited 20-plus data centers in recent months and says public debate about them is badly wrong. Viral clips dub in audio that you never hear outside a facility, and water claims trace back to cases like a Switch site near Reno with a lake used to refill cooling systems after a chiller failure. Outside Virginia's big data center park he saw bunny rabbits, not protesters, in one of the richest counties in the country. "The future of our tech is needing to build this infrastructure now," he says, and crippling it based on Instagram and TikTok posts is a bad decision.
9. **Governance Is the Product.** "If it's free, there's nothing free," Lyon says of the dozens of offshore VPNs in any app store. DoxxNet is US-based and runs European operations through a separate Swiss company, with more regions set up the same way. He says he wouldn't trust a privacy company that won't say who owns it, so DoxxNet is open about who's involved and why decisions were made. De la Garza adds the case of the FBI building a "secure" messaging app, marketing it to organized crime groups and indicting its users.
10. **Scale as a Leased Service.** Prolexic started because people attacked Lyon's high school shell-account servers, which he rented at $5 a month to about 1,000 users under the DoxxNet name. He wrote up how to survive DoS attacks, presented it at SANS, and companies started calling about extortion: rival watch sellers hit during Christmas sales, gambling sites knocked offline before the Super Bowl. His insight was that defense required the biggest, most expensive gear, so he leased it as one of the first cloud services. DoxxNet applies the same big-infrastructure skill to individuals instead of corporations, and Lyon expects to fight DoS from inside his own network, since "even if you have privacy, there's still laws."
11. **The $50 Bet.** As a penetration tester, Lyon found that diagramming a target's network was the easiest way in, and he automated it. At lunch one day he bet some colleagues $50 he could map the entire internet, a bet he expected to lose. Then a car hit him on his bicycle, he couldn't walk, and he spent the slow months writing the code that became the Opte Project. It reached MoMA, the Boston Museum of Science and traveling exhibits, and its animations show companies crashing over time. After the MoMA opening party he felt impostor syndrome, worried he'd never feel like an artist again.
12. **Three Failures at Once.** Lyon logged 1,300 hours commuting by Cirrus between the Bay Area and Tahoe until his engine lost power over Oakland after an a16z meeting. He messaged friends "Hey guys, I have an emergency. Love you," weighed pulling the ballistic parachute, and landed at Buchanan Field instead. The cause was a cascade: a broken piece of metal was sucked into the intake and crushed into cylinders, the new electronic ignition failed, and the backup magneto quit at the same time. On the ground it half worked, which made it hard to diagnose. He sold the plane, and says any future aircraft will have fewer moving parts.

Watch the full video at [https://www.youtube.com/watch?v=bmDrbHOh7Bo](https://www.youtube.com/watch?v=bmDrbHOh7Bo&ref=signalful.com).