Decentralized Gateways
Access the decentralized web securely across any blockchain
Trustless domain resolution through Marlin Oyster's TEE-secured network
ADVANTAGES
Features
Multi-chain support
Compatible with various blockchain naming services including .sol, .arb, .bnb, .manta, and .inj domains.
Tamper-proof resolution
TEE-secured code execution ensures domain resolution cannot be manipulated or compromised
No intermediaries
Direct connection between users and content without centralized points of control or censorship
Universal access
Simple domain format (domain.tld.place) works seamlessly with standard web browsers.
Request
Browser sends a request for a blockchain domain (example.tld.place) through the gateway
Resolve
Enclave securely translates the domain to its corresponding IPFS content hash
Fetch
The secure IPFS node retrieves content from the decentralized storage network
Deliver
Gateway serves the verified content directly to the user's browser
Request
Browser sends a request for a blockchain domain (example.tld.place) through the gateway
Resolve
Enclave securely translates the domain to its corresponding IPFS content hash
Fetch
The secure IPFS node retrieves content from the decentralized storage network
Deliver
Gateway serves the verified content directly to the user's browser
LEVERAGE
Marlin TEEs in action
Learn how top AI teams are leveraging Marlin TEEs to make their gateways secure
Bonfida
Bonfida's integration with Marlin Oyster enables secure, censorship-resistant access to content linked to .sol domains.
Docs
GitHub
WRITINGS
View our documentation
Can't find the answer you're looking for? We have a database of useful documents and resources dedicated to help you
FAQ
Questions?
We have answers
A trusted execution environment (TEE) is a secure area of a main processor. It helps code and data loaded inside it to be isolated from other processes usually at a hardware level in order to provide confidentiality and integrity. Data integrity prevents unauthorized entities from outside the TEE from altering data, while code integrity prevents code in the TEE from being replaced or modified by unauthorized entities, which may also be the computer owner itself.
Oyster is a sub-network of Marlin that specializes in offering TEE-based coprocessors. It is fast, cheap and secure. It allows instances to be rented individually for any stretch of time or for tasks to be delegated amongst a pool of nodes in a serverless way without individually renting instances and paying only for the duration of the task's execution. Nodes can be rented and tasks delegated using both smart contract calls and web 2 APIs. A set of auditors routinely query Oyster nodes to ensure uptime guarantees.
Oyster is very flexible and versatile. Developers can port existing web 2 applications on Oyster, write code in the programming language of their choice and use popular libraries and frameworks. Additional benefits include:
1. Secure: Hardware isolation ensures that programs run correctly as intended without exposing their contents and prohibiting interference from the host machine or its owner.
2. Fast: Oyster nodes are essentially like usual servers. There’s no redundancy in computation, complex protocol logic or cryptography. Thus, apart from a little TEE overhead for encrypted memory access, Oyster nodes are very performant and provide an experience similar to running programs on a normal machine.
3. Cheap: TEEs can be considered commoditized. While a little more expensive than vanilla servers, they are very cheap compared to blockchains, MPC, FHE or ZK proofs. Consequently, TEEs are a very affordable mode to carry out computations verifiably.
Oyster is a permissionless network. As such, programmers can contribute to its codebase, developers can build trustless web 3 applications by deploying their backends on Oyster nodes and infrastructure providers can run TEE-enabled Oyster nodes.
| Features | Trusted Execution Environments (TEEs) | Zero-Knowledge Proofs (zk) |
|---|---|---|
| Main Purpose | Secure execution of code in an isolated environment | Prove knowledge without revealing it |
| Scalability | Generally good, limited by hardware | Limited by computational overhead |
| Performance | Faster as it leverages direct hardware support | Generally slower due to the cryptographic operations required |
| Support for Complex Computations | Better suited for complex computations, given adequate TEE capabilities | Limited, best suited for simpler proofs |
| Development Complexity | Medium, as it often involves utilizing existing hardware features | High, requires expertise in cryptography |
| Integrity Verification | Verified by hardware and software measures internal to the TEE | Can be verified publicly without revealing underlying data |
| Trust Model | Hardware-based trust; relies on the manufacturer and design of the TEE | Cryptographic trust; no need for trusted hardware |
| Overhead | Low to medium, depending on the implementation | High, due to complex calculations |
| Portability | Dependent on specific hardware and therefore less portable | Can be implemented in software across different platforms |
| Data Privacy | Yes, data is protected within the TEE | Yes, no data is revealed |
| Regulatory Acceptance | Subject to hardware security review and potential backdoor concerns | Subject to cryptographic review |
| Attestation Capability | Hardware and software attestation mechanisms provide trust assurance | Mathematical proof provides attestation of correctness |
| Finality | Instant execution within the TEE | Instant verification once proof is computed |
| Maturity | Well-established with industry standards | Relatively new, rapidly evolving |