Skip to content
All projects
Privacy Networks (Tor)Open source

Tor-Optimized Blog Engine: Zero-JS Go Architecture

A strict zero-JavaScript, server-side rendered blog architecture engineered specifically for the Tor network. Built with Go and Fiber to deliver extreme performance and absolute OPSEC compliance for Darknet environments.

Source code

Tech stack

Languages
Frameworks & libraries

Performance & metrics

  • Near-zero client-side processing overhead due to pure HTML/CSS DOM delivery
  • Extremely low memory footprint and high concurrency throughput achieved via Go's native goroutines and Fiber v3
  • Mitigates traditional web vulnerabilities (XSS, CSRF) organically by eliminating client-side scripting and utilizing strict server-side template escaping

Why I built it

Operating on the Tor network requires uncompromising adherence to OPSEC principles—most notably, the absolute elimination of client-side JavaScript to prevent deanonymization, IP leaks, and zero-day executions. I engineered this blog architecture to function flawlessly under the Tor Browser's 'Safest' security level. It strips away modern SPA bloat, replacing it with a highly optimized, dynamically generated HTML/CSS frontend, ensuring maximum anonymity and rendering speed over high-latency onion routing.

Architecture & decisions

The backend is a high-performance Go application utilizing the Fiber v3 framework for rapid HTTP routing. Data persistence is managed by a CGO-free SQLite driver (modernc.org/sqlite), ensuring lightweight, seamless cross-compilation without external C dependencies. Authentication relies on bcrypt hashing and hardened HttpOnly, SameSite=Strict cookies. The frontend is entirely Server-Side Rendered (SSR) using Go templates; it contains zero JavaScript. The relational database schema is designed for a scalable blog architecture, mapping Categories to Topics and specific Blog Nodes (Communities), while enforcing strict server-side authorization middleware for all CRUD operations.

Key features

  1. 01Absolute Zero-JS frontend guaranteeing compatibility with Tor Browser's maximum security tier
  2. 02High-speed Server-Side Rendering (SSR) via Go templates to combat onion network latency
  3. 03CGO-Free SQLite database integration for simplified deployment and embedded data persistence
  4. 04Bcrypt-secured authentication pipeline with hardened, HttpOnly cookie session management
  5. 05Multi-tiered blog architecture (Categories > Topics > Nodes) with dynamic SQL generation

Technical review

This project is a technical exercise in building modern, scalable web architectures under the extreme constraints of the Deepweb. By completely discarding JavaScript and relying exclusively on efficient Go-based SSR and raw CSS for interactivity (e.g., checkbox-hacks for UI toggles), the engine eliminates the attack surface associated with client-side execution. It provides a secure, hyper-fast, and anonymous blogging infrastructure capable of handling concurrent traffic gracefully despite the inherent limitations of the Tor network.