Your Data Physically
Cannot Leave.
No egress. No CDN. No analytics. No cloud dependencies.
Every service runs inside your perimeter.
The Boundary
See the difference between a typical deployment and QP.
What's Inside the Perimeter
Every service QP needs runs on your infrastructure.
Conduit DNS
Local DNS resolution for all service discovery. No external lookups.
Conduit TLS
Internal CA issues certificates for all service communication. No Let's Encrypt.
Internal CA
Ed25519 root certificate authority. Signs all internal TLS certificates.
Local LLM
Ollama or vLLM running on your hardware. No tokens leave your network.
Local Embeddings
Vector embeddings generated on-premise. No API calls to OpenAI.
Local Database
PostgreSQL + pgvector. Full-text and semantic search, entirely local.
What Cannot Happen
In air-gap mode, these capabilities are physically impossible.
The Only Way Out
Tunnel is the single approved network path out of the perimeter. It requires cryptographic authorization, runs through a stateless relay, and wraps all traffic in double encryption (WireGuard outer, PQ TLS 1.3 inner).
Run AI Where
Internet Can't Go.
Deploy Quantum Pipes in air-gapped environments. Submarines, SCIFs, hospitals, trading floors. Zero connectivity required.