On-Chain Hosting — ATSHI Network

A New Hosting Paradigm

What Is On-Chain Hosting?

Your entire website — every file, every asset — lives on the blockchain, served globally without a single server to manage

Transaction Chains store website content directly in the Content field — HTML, CSS, JavaScript, images, fonts, everything on-chain. Your website is not hosted on a server that can go down, be seized, or be censored. It exists on the blockchain itself, replicated across the network and served to users worldwide.
Native blob storage in Elixir/OTP replaces the IPFS/Kubo dependency entirely, delivering native performance without external pinning services, garbage collection issues, or gateway bottlenecks. Content is stored and served directly by the ATSHI node runtime.
Content-addressed storage: every file receives a cryptographic hash upon deployment. Anyone, anywhere, at any time can verify that the content served matches exactly what was published. Tamper-proof by design, not by promise.
General-purpose data & file storage: Store any data or files on-chain — documents, images, datasets, configuration files. Content-addressed storage ensures integrity and availability across the network.
Delta deploys: manifest-based hosting tracks your site structure. On updates, only changed files are uploaded to the chain — saving 90%+ bandwidth on typical deployments. Version your entire website like a git repository, with instant rollbacks to any previous state.
Multi-node distribution: DNS round-robin or GeoDNS across web-capability nodes worldwide ensures low-latency delivery regardless of the user's geographic location. Your site is served from the nearest node, not from a single data center.
SSL/TLS automation via Caddy/Nginx reverse proxy with Let's Encrypt — fully automatic certificate provisioning and renewal. No SSL keys stored on-chain, no manual certificate management, no expiration surprises.

Deployment Flow

Developer

→

Deploy (CLI)

→

On-Chain Storage

→

GeoDNS

→

User Browser

Content stored on blockchain — no server, no hosting provider, no single point of failure

Storage Native blob storage in Transaction Chain Content field

Delivery GeoDNS across web-capability nodes worldwide

SSL/TLS Automatic Let's Encrypt via Caddy/Nginx reverse proxy

Updates Delta deploys — only changed files uploaded (90%+ savings)

Protocol-Level Security

Geo-Blocking & Access Control

Granular access control built directly into the hosting protocol — not bolted on at the server level

Region-based blocking: restrict access to your hosted content based on the caller's geographic location. Comply with sanctions, data residency requirements, or market-specific content restrictions at the protocol level — enforced by every serving node.
Wallet-based authentication: require a valid ATSHI wallet connection to access content. Gate your entire site or specific pages behind wallet ownership, turning your website into a members-only experience with zero traditional auth infrastructure.
Role-based content access: different content visible to different roles through deep integration with ATSHI's RBAC system. Admins see the dashboard, members see premium content, visitors see the public site — all from the same deployment.
Token-gated content: require ownership of specific tokens or NFTs to view premium content. Build exclusive communities, paywalled publications, or VIP experiences where access is provably tied to on-chain asset ownership.
IP-based and country-level filtering for regulatory compliance — essential for enterprises operating under GDPR, export controls, or jurisdiction-specific content laws.
Combined with per-field encryption for partial content visibility — some content visible to all, sensitive sections encrypted and accessible only to authorized wallets or roles.

Access Control Layers

1 Geographic Filtering — Country & region-level blocking

2 Wallet Authentication — Valid ATSHI wallet required

3 Role-Based Access — RBAC integration per content section

4 Token-Gated Content — NFT/token ownership verification

Result: Fine-grained access control at every layer, enforced by the protocol

Web Identity

Naming System

Three tiers of naming to match every use case — from instant subdomains to fully custom domains bridged to on-chain content.

🌐

Managed Subdomains

Instant setup with zero configuration. Deploy your site and get a URL like username.atshi.network immediately. Perfect for prototypes, personal sites, and quick launches. SSL included automatically.

Instant · Zero Config

⛓

On-Chain Names

Register human-readable names directly on-chain, owned by your Transaction Chain. Your name is a blockchain asset — transferable, tradeable, and permanently yours. No registrar can revoke it, no ICANN policy can seize it.

Owned · Transferable

🔗

DNS Bridge

Connect your own domain (.com, .fr, .io) to on-chain content via the DNS bridge with .arch TLD resolution. Keep your existing brand identity while serving content from the blockchain. Traditional DNS meets decentralized hosting.

Custom Domains · .arch TLD

Trust Without Trusting

Content Verification

Cryptographic proof that the content you see is exactly what was published — verified client-side, not promised server-side

Client-side verification: HTTP headers returned with every response include the on-chain content hash. Your browser (or any HTTP client) can independently verify that the served content matches exactly what was stored on the blockchain. Trust math, not infrastructure.
JavaScript SDK: embed verification directly in any web application with a lightweight SDK. A few lines of code and your site actively proves its own integrity to every visitor, displaying verification status in real-time.
Browser extension: a visual badge confirms content integrity on any ATSHI-hosted site. Users see at a glance whether the site they are visiting is verified, tampered with, or unverified — without any action required from the site owner.
Protects against tampering: even if a relay node is compromised, the client detects any modification instantly. The content hash is anchored on-chain — any byte changed means the hash no longer matches. No man-in-the-middle attack can succeed undetected.

Verification Flow

Content Served

→

Hash Comparison

→

Verified / Rejected

HTTP Headers On-chain hash included in every response

JS SDK Embed verification in any web app with a few lines of code

Extension Visual badge confirms integrity in the browser

Tamper-Proof Any modification detected instantly — hash mismatch = alert

Shared Infrastructure

Package Registry

A decentralized CDN for shared libraries — versioned, verified, and community-maintained. Reference instead of bundling.

📦

Decentralized CDN

Shared libraries like React, TFHE WASM modules, and common frameworks are hosted on-chain as verified packages. Reference them directly in your deployments — no need to bundle heavy dependencies. Every package is served from the same globally distributed infrastructure as your site.

React · TFHE WASM · Common Frameworks

✅

Versioned & Verified

Every package has on-chain hash verification and semantic versioning. Pin to exact versions for reproducible builds, or track major versions for automatic non-breaking updates. Community-maintained: anyone can publish verified packages, reviewed and validated by the network.

Hash-Verified · Semver · Community

Why On-Chain Hosting

Advantages

Every benefit of traditional hosting, none of the vulnerabilities — plus capabilities that centralized infrastructure simply cannot offer.

🛡

Uncensorable

Content lives on the blockchain — no single point of failure, no hosting provider to pressure, no kill switch. Your site stays online as long as the network exists.

🔎

Verifiable

Cryptographic proof that content has not been tampered with. Client-side verification, browser extension badges, and SDK integration make integrity visible and automatic.

🌎

Global

GeoDNS distribution across web-capability nodes worldwide. Low-latency delivery everywhere, no CDN configuration required — the network IS the CDN.

🔒

Secure

SSL automation, wallet authentication, geo-blocking, role-based access, and token-gating — all built into the protocol. Security by default, not by configuration.

⚡

Efficient

Delta deploys save 90%+ bandwidth on updates. Manifest-based tracking means only changed files are uploaded. Version history with instant rollback to any previous state.

💻

Developer-Friendly

Simple CLI deployment with familiar web tools. Build your site with any framework, deploy with a single command. No blockchain expertise required to host.

How We Compare

Hosting Solutions Compared

ATSHI On-Chain Hosting is the first solution to combine censorship resistance, native access control, content verification, and developer experience in a single platform.

Feature	Traditional Hosting	IPFS / Filecoin	Arweave	Fleek	ATSHI On-Chain
Storage	Centralized server	Distributed P2P	Permanent block	IPFS + ENS	Native on-chain (Transaction Chain)
Censorship Resistance	Vulnerable	Moderate	Resistant	Moderate	Blockchain-grade
SSL/TLS	Manual or managed	Complex setup	None native	Yes	Automatic (Let's Encrypt)
Delta Deploys	Git-based	No	No	Yes	Native (90%+ savings)
Geo-Blocking	Server-level	No	No	No	Protocol-level
Wallet Auth	No	No	No	No	Native ATSHI wallet
Content Verification	No	Hash-based	Hash-based	Hash-based	Client-side + browser extension
Naming System	DNS only	ENS / IPNS	ArNS	ENS	3-level (subdomain / on-chain / DNS bridge)
Package Registry	npm / CDN	No	No	No	Decentralized, versioned, verified

Your Website, On the Blockchain — Uncensorable, Verifiable, Global