TON Sites and TON Proxy

Discover TON—a revolutionary ecosystem far beyond a mere blockchain platform. Encompassing TON Sites, TON WWW, and TON Proxy, TON sets the stage for a radical transformation in how we interact online. At its core, TON boasts a network technology crafted specifically to enable seamless communication and data exchange between nodes. This innovation doesn’t just enhance blockchain functionality—it propels the network into a new era, comparable to the decentralized and secure environments of TOR and I2P.

Blockchain evolution with TON Sites, Proxy and WWW.

More than just a blockchain, TON is a synergistic blend of its advanced network protocols, the native Toncoin cryptocurrency, and a suite of comprehensive services. This deep integration fosters a truly decentralized, secure, and private computer network, heralding a new generation of the internet. Ready to dive into a platform where technology meets privacy? Explore the expansive capabilities of TON at the TON Foundation homepage.

Update 2026-02: TON’s “Web3 services” stack is best understood today as a set of connected components: TON Network (ADNL + DHT), TON Proxy, TON DNS, TON Storage, and TON Payments (payment channels for instant/micro-payments). Practical tooling has also matured: tonutils/reverse-proxy (hosting TON Sites) and Tonutils-Proxy (local TON Proxy) are widely used, while some public HTTPS gateways (e.g., *.ton.website / *.ton.run) let anyone open .ton sites without configuring a local proxy. Always verify the network and wallet flow you use for domains, as dns.ton.org may display a testnet warning.

TON Network: Security, Protocols, and Integrations

The TON Network is engineered to redefine the standards of data exchange and communication through its advanced network protocols. Unlike traditional systems, TON operates on a fundamentally decentralized framework, which means it does not rely on any central servers, ensuring that control and data retention are spread across a vast peer-to-peer network. This structure not only boosts the resilience of the network but also greatly enhances user privacy and data security.

Scheme of TON network working.

Decentralization and Stability

At the heart of TON's robust architecture is its peer-to-peer protocol. This ensures that no single node's failure can impact the network's overall functionality, making it extraordinarily stable and reliable. Whether a node goes offline due to technical issues or external factors, the network's integrity remains intact, demonstrating an unprecedented level of resilience.

Privacy and Security

Privacy on the TON Network is paramount. It is virtually impossible to trace or identify a node’s IP address, safeguarding user identities and activities from external observations and potential cyber threats. Furthermore, all communications within the network are encrypted, which secures data against interception and unauthorized access. This encryption is not just a feature but a core aspect of the network’s operation, ensuring data privacy without the need for third-party certification authorities.

Sophisticated Network Protocols

TON employs UDP/IP and TCP/IP, the bedrock protocols of the internet, to maintain compatibility and performance. For those interested in a deeper dive into how these protocols are optimized within TON, the Open Network's white paper, specifically Chapter 3, provides an in-depth technical explanation.

Adapting to Future Needs

TON is designed to scale by splitting and merging load across shards. In TON’s Infinite Sharding Paradigm, a workchain can be split into shardchains when transaction load rises and merged back when it falls, so capacity scales with demand instead of relying on a single chain’s fixed throughput.

In practice, TON workchains can dynamically change the number of shardchains as a power of two, with shard prefixes defining which accounts live in which shardchain—allowing horizontal scaling as usage grows.

TON Sites – A Revolution in Web Hosting

Creating a TON Site offers numerous advantages over traditional websites, chiefly due to its decentralized nature, enhanced security protocols, and simplified domain management systems. Here’s a detailed walkthrough on how to launch your own TON Site, utilizing TON's innovative tools and TON DNS system.

Step-by-Step TON Site Setup

TON Sites are regular HTTP websites served through the TON Network. Under the hood, the site is addressed by an ADNL identifier and fetched over RLDP (HTTP over ADNL), while your origin server can remain a familiar local web server (Nginx/Apache/Node/etc.).

Install tonutils Reverse Proxy

The most common way to publish a TON Site in 2026 is a reverse proxy that bridges RLDP → HTTP on your server. A widely used implementation is tonutils/reverse-proxy.

Linux (amd64)

wget https://github.com/tonutils/reverse-proxy/releases/latest/download/tonutils-reverse-proxy-linux-amd64
            chmod +x tonutils-reverse-proxy-linux-amd64

Run and link your .ton domain (TON DNS)

./tonutils-reverse-proxy-linux-amd64 --domain your-domain.ton

Scan the QR code with a TON wallet (e.g., Tonkeeper/Tonhub) and confirm the transaction to link the domain to your site. If you cannot scan a QR code, re-run with -tx-url to display a ton:// transaction link.

Run without a .ton domain (ADNL-only)

./tonutils-reverse-proxy-linux-amd64

In ADNL-only mode, your site is reachable via a .adnl address. You can later attach a human-readable .ton domain by setting the domain’s site record to your ADNL.

Configuration notes

Edit config.json to change upstream settings. By default, the proxy passes requests to http://127.0.0.1:80/. The proxy may also add diagnostic headers such as X-Adnl-Ip and X-Adnl-Id.

Networking requirement

Your server generally needs a public IP and must allow inbound/outbound UDP on the port defined in config.json for TON Network traffic.

Verify your TON Site

You can verify reachability either through a local TON Proxy (recommended for privacy) or via an HTTPS gateway (quickest to test). Example via gateway:

https://your-domain.ton.website

Advantages of TON Sites

  • Enhanced Security and Privacy:
    • Mandatory Encryption: Every data transaction on a TON Site is automatically encrypted, ensuring that sensitive information remains secure from prying eyes. Unlike traditional HTTP/S protocols that rely on third-party certification, TON's built-in encryption safeguards all data inherently without external validation.
    • Data Authenticity: TON automatically verifies the authenticity of data exchanged, providing a layer of security that traditional DNS systems cannot.
  • Decentralized Domain Management with TON DNS:
    • Elimination of Centralized Control: With TON DNS, the need for traditional domain name registries is obsolete. TON DNS allows domain names to be managed in a decentralized manner, significantly reducing the risks of censorship or domain seizure.
    • Simple Domain Setup: Registering and maintaining a domain on TON DNS requires only a minimal annual micropayment, described as a "sign of life" payment to confirm domain ownership. This can be done easily through any TON-compatible wallet.
  • Integration and Customization
    • Sub-domains and Smart Contracts: TON DNS supports the creation of sub-domains using smart contracts, allowing for dynamic and flexible site structure. Owners can manage sub-domains through manual or automated DNS smart contracts, catering to a wide range of use cases.

TON Proxy – The Gateway to Anonymity

The TON Proxy is a crucial component of the TON ecosystem, enabling secure and private access to the TON network. Here’s how you can set up and run a TON Proxy, utilize ADNL addresses for site access, and integrate the proxy with various browser settings to ensure seamless connectivity.

Setting Up TON Proxy

To open TON Sites, you need a gateway between the “ordinary” Internet and the TON Network. In practice this means an HTTP → RLDP entry proxy on the client side, and an RLDP → HTTP reverse proxy on the server side.

Option A: Tonutils-Proxy (user-friendly local proxy)

Tonutils-Proxy is a user-friendly TON Proxy implementation with prebuilt binaries for major platforms. It starts a local HTTP proxy (commonly 127.0.0.1:8080) which your browser can use to open .ton sites.

After starting it, configure your browser’s HTTP proxy settings to point to:

HTTP proxy host: 127.0.0.1
            HTTP proxy port: 8080

Then try opening a TON Site such as http://foundation.ton/.

Option B: RLDP-HTTP Proxy (classic entry proxy)

The classic approach is to run the rldp-http-proxy entry proxy locally, backed by a TON global config file:

rldp-http-proxy -p 8080 -c 3333 -C global.config.json

Quick test with curl:

curl -x 127.0.0.1:8080 http://just-for-test.ton

Note: encryption is handled at the ADNL layer, so HTTPS/TLS is not required when the entry proxy runs locally. If you use third-party/public entry points over plain HTTP, treat that as “trial only” because traffic outside the TON Network may not be protected end-to-end.

How to setup and launch TON proxy.

Integrating TON Proxy with Browsers

Setting up TON Proxy for browser use involves configuring the proxy settings within your preferred web browser. Major TON wallets and browser extensions now natively support TON Proxy, enabling seamless access to .ton domains without requiring manual configurations:

  • Google Chrome, Firefox, and Safari:
    • Navigate to your browser’s network or proxy settings.
    • Set up a manual proxy configuration if necessary:
      • HTTP Proxy: Enter the IP address and port (8080) of your TON Proxy.
      • Alternatively, use TON browser extensions like Tonkeeper or MyTonWallet that auto-configure proxy settings.
  • iOS and Android:
    • Go to your device’s WiFi settings.
    • Modify the network settings to use a manual proxy setup.
    • Input the IP and port of your TON Proxy.
    • Alternatively, TON-compatible wallets like Tonhub and Tonkeeper now integrate proxy support for seamless mobile access.
  • Windows and macOS:
    • Access the network settings and select the manual proxy configuration option.
    • Provide the details of your TON Proxy.

For the most streamlined experience, download the latest TON-compatible wallets and browser extensions that automatically configure proxy settings for .ton domains.

Public HTTPS Gateways for .ton Domains

If you prefer not to run a local proxy, third-party HTTPS gateways can fetch TON Sites for you and display them in a normal browser. Common patterns include:

  • Primary gateway: https://<your-domain>.ton.website
  • Alternative gateway: https://<your-domain>.ton.run
  • Direct ADNL: https://<your-adnl>.adnl.website

Privacy note: an HTTPS gateway is a convenience layer. Your browser connects to the gateway over HTTPS, and the gateway then fetches content from TON. This means the gateway operator can observe requests and content. For maximum privacy, prefer a local TON Proxy or a trusted self-hosted gateway.

Content note: gateways typically do not host, control, moderate, or endorse external TON Sites—each site is operated by third parties.

TON DNS in 2026: .ton Domains for Wallets and TON Sites

TON DNS maps human-readable names (e.g., user.ton or example.ton) to on-chain accounts, smart contracts, and TON Network identifiers such as ADNL addresses used by TON Sites. In other words, TON DNS is how a .ton name can point to your TON Site.

Tonkeeper flow (common user path): TON DNS domains appear as NFTs in the wallet’s “Collectibles”. You can link a domain to your wallet address (“Link domain”), and domains must be renewed yearly to avoid losing them.

Important: always verify which network you are using before bidding or renewing; dns.ton.org may show a prominent test network warning.

TON Storage: Bags of Files, DHT Discovery, and Verifiable Data

TON Storage is TON’s distributed file sharing layer. Rather than storing large files on-chain, TON Storage uses the network to distribute file data, while keeping verifiability via Merkle proofs and related mechanisms.

Conceptually, content is distributed as a bag of files (torrent-like). Data transfer happens over ADNL using RLDP, and peers are discovered via the TON DHT. The bag identifier (bagID) uniquely identifies the content being shared.

How this relates to TON Sites: TON Docs note that TON Domains can be assigned to ADNL addresses, including identifiers for TON Storage “bags”, which enables naming content beyond traditional websites.

Tip: If your goal is a conventional “website-like” experience, a reverse proxy (TON Site) remains the simplest operational model; TON Storage-based hosting is more advanced and ecosystem support can vary across clients and gateways.

TON Payments and TON Pay: Micro-payments, Checkout, and App Integrations

TON Payments in TON’s protocol stack (official website) refers to “instant payments” built on payment channels: parties update balances off-chain and only settle on-chain when needed. This design supports micro-payments and is explicitly discussed as suitable for per-usage billing (e.g., per 128 KiB for storage bandwidth or proxy relays).

TON Pay (builder-facing) is presented as a shared payments layer for TON apps, designed so developers and merchants can integrate crypto payments once and reuse that checkout across consumer apps, starting with Telegram Mini Apps.

SEO note for editors: If you keep a “TON Payments” section for keywords, anchor it to payment channels (TON Docs) and keep “TON Pay” as the modern product layer for app checkout flows.

Advancing Security and Privacy: Future Updates to TON Proxy

As part of its ongoing commitment to enhancing user security and privacy, the TON network has introduced significant updates to TON Proxy. These updates, now available in versions 2.0 and 3.0, are revolutionizing how personal data and online interactions are protected.

TON Proxy 2.0: Garlic Routing for Enhanced Anonymity

The recently launched TON Proxy 2.0 implements garlic routing, a groundbreaking technology that significantly enhances anonymity by bundling multiple messages together and encrypting them in multiple layers. This approach effectively conceals the data paths across the network, making it nearly impossible to trace user IP addresses or communication origins.

Inspired by the TOR Network and I2P, garlic routing is uniquely integrated into the TON infrastructure to leverage blockchain security while enhancing user privacy. Users now experience a higher level of anonymity, setting a new benchmark for secure digital interactions.

For more technical details on garlic routing in TON Proxy 2.0, refer to the TON white paper.

TON Proxy 3.0: Decentralized Finance to Incentivize Network Support

With the launch of TON Proxy 3.0, the network now integrates decentralized finance (DeFi) features to reward node operators. This update introduces a microtransaction-based incentive system powered by Toncoin, the native cryptocurrency of the TON network.

Through a network of payment channels, node operators are rewarded for facilitating data flow and maintaining network stability. This incentivization system not only enhances node participation but also ensures the network remains decentralized, efficient, and resilient to failures.

These micropayments encourage more users to participate as node operators, further strengthening the TON ecosystem. Learn more about how TON Proxy 3.0 contributes to network decentralization on the TON Foundation blog.

The Impact of These Enhancements

The introduction of garlic routing and DeFi incentives represents a major leap in decentralized network technology. TON Proxy’s updates now provide unmatched privacy, anonymity, and security for users while ensuring the long-term sustainability and growth of the network.

By combining blockchain’s decentralized architecture with innovative privacy technologies, TON Proxy positions itself as a leading solution for secure digital communications. For ongoing updates and community insights, visit the TON Community Page.

These enhancements pave the way for a decentralized, secure, and user-driven internet where privacy is no longer a luxury but a fundamental right.

Enhancing User Experience and Accessibility with TON

Seamless Access to TON Sites

TON Proxies act as a bridge between the traditional internet and the TON network, enabling users to access .ton sites just like they would any other website. This is achieved by configuring the TON Proxy settings directly within users' browsers. Whether you're using Chrome, Firefox, or Safari, setting up is straightforward:

  1. Navigate to your browser’s network settings.
  2. Enter the TON Proxy settings provided by either public entry points or your private TON Proxy setup.
  3. Once configured, you can directly access any .ton domain, enjoying the full benefits of a decentralized network without any additional setup.

Simplified Authentication and Enhanced Security

TON revolutionizes how users interact with websites by eliminating the need for multiple passwords. With TON's wallet integration, users can log in to various services and sites by simply authenticating via their TON-based cryptocurrency wallet. This not only streamlines the process but significantly enhances security by reducing the risk of password theft.

TON also simplifies transactions by allowing users to send Toncoins directly to a website’s domain address. For instance, if you wish to support a service, donate to a cause, or make a payment, you can do so by simply transferring Toncoins directly to the domain, bypassing traditional payment processors and reducing transaction fees.

User Testimonials and Impact on Privacy

Many users have praised TON for its user-friendly approach and enhanced security features. The integration of blockchain technology into everyday internet use not only provides a layer of security but also significantly impacts user privacy, making personal data far less susceptible to breaches.

To learn more about how TON is changing user experiences and enhancing privacy through blockchain technology, explore detailed user testimonials and case studies that highlight the practical benefits and real-world impact of these innovations.

Through these features, TON is not just facilitating easier access and safer transactions but is also paving the way for a more secure, user-centric internet.

Conclusion

TON is at the forefront of revolutionizing internet usage through its commitment to decentralization, enhanced security, and a focus on user-centric features. As we move forward, the potential for TON to reshape how we interact online is immense, offering more secure, private, and efficient digital experiences.

We invite you to join this transformative journey and become an active participant in the TON community. Engage with us, contribute, and help shape the future of the internet. For more information and to get involved, join the TON Community and explore how blockchain is redefining the internet.

Together, let's build a more secure and decentralized online world.

Developer Tooling, Network Status and Analytics

For operational visibility, TON’s documentation maintains a curated list of network status resources (HTTP/ADNL availability, node metrics, validator dashboards, and validator alert channels). This is the most reliable starting point before trusting third-party uptime pages.

For data work (domains, transactions, activity), TON’s docs also highlight analytics/indexing options designed for querying blockchain data at scale.

Frequently Asked Questions (FAQ)

What are TON Sites?

TON Sites are websites served through the TON Network. They are addressed by ADNL identifiers (and optionally mapped via TON DNS to a human-readable .ton domain) and can be accessed using a TON Proxy or an HTTPS gateway.

What is TON Proxy used for?

TON Proxy provides a way to route ADNL network traffic through proxy nodes (with or without compensation) and is used to access TON Sites (HTTP over ADNL) privately through the TON Network.

How does TON DNS relate to TON Sites?

TON DNS translates human-readable names like example.ton into identifiers such as ADNL addresses used by TON Sites, making TON Sites easier to share and discover.

How do I renew a .ton domain?

Domains must be renewed yearly. In Tonkeeper, domains appear as NFTs in “Collectibles”; you can manage and renew them via the wallet flow (which may redirect you to a DNS management interface). Keep enough TON to cover network fees (wallet guidance often recommends ~0.1 TON available).

Can I open .ton sites without running a proxy?

Yes—public HTTPS gateways can open .ton sites in a regular browser. However, gateways are third-party services and may observe traffic, so a local proxy is recommended for maximum privacy.