Our Global Network

The continuously-replicated backbone that powers every Tuxxin product — and the vantage points we use to measure the internet from the inside.

Tuxxin runs its own global network — a continuously-replicated backbone with points of presence and internet-exchange peering across four continents. It is the foundation every Tuxxin product sits on, from real-time IP intelligence and internet measurement to multi-egress threat scanning. We build and operate it ourselves: no reseller markup, no single-cloud lock-in, and network vantage points in places most providers never reach. That reach is not just for speed — it is what lets us measure the internet from the inside.

22
Internet exchanges
direct peering
15
Countries
and growing
4
Continents
global reach
24/7
Replicated backbone
reads & writes close to home

Where We Peer & Operate

Regional hubs form a continuously-replicated backbone with internet-exchange peering across four continents — keeping traffic fast, paths short, and our measurement vantage points diverse. We publish presence at the country and state level to keep our operational fingerprint minimal.

North America2
United StatesCanada
U.S. states: VA · WA · NY · IL · MI · CO · FL · GA · TX · CA · AZ   ·   Canada: QC · ON · BC
Europe7
United KingdomFranceGermanyItalySpainNetherlandsSwitzerland
Asia-Pacific5
SingaporeJapanAustraliaIndiaPakistan
South America1
Brazil

Geolocation by Triangulation

Here is the real reason we are standing up so many internet exchanges: we are building our own IP geolocation database — and location, done properly, is a measurement problem, not a lookup.

Legacy geo databases like MaxMind — and the registration records they lean on — have fallen behind. They largely tell you where an address block was registered, not where it actually answers from today. Proxies, VPNs, carrier-grade NAT, and blocks that get re-homed across regions all break that assumption, and a growing share of the internet now hides behind exactly those.

Our approach is different. With a dense mesh of peering points around the world, we observe each address from many directions at once and triangulate where it truly is — the same principle as GPS, applied to network latency and topology. More vantage points means tighter triangulation, which is exactly why the IX footprint keeps growing.

Measured, not registered

Real location from latency & topology, not a stale WHOIS entry.

Proxy & VPN aware

First-class detection of the addresses legacy geo gets wrong.

More angles, tighter fixes

Every new exchange sharpens the triangulation — like GPS satellites.

Keeps up with change

Continuous measurement tracks IPs as they move, instead of once a month.

In development now — the geolocation engine that will power worldip.io.

A Network Built to Measure & Defend

Globally-replicated backbone

A continuously-replicated ClickHouse backbone spans multiple continents. Every region reads and writes close to home while the full dataset stays queryable in real time.

Internet-exchange peering

Direct peering across 22 internet exchanges shortens network paths and cuts transit dependence — and gives us the diverse vantage points behind our geolocation triangulation.

Multi-region points of presence

Points of presence across North America, Europe, and Asia-Pacific give us low-latency reach and observation angles most providers never deploy to.

Continuous internet measurement

A scanner fleet runs continuous reverse-DNS (PTR) measurement of the allocated IPv4 space — the engine behind worldip.io. We measure, we do not intrude: PTR lookups only, no port scans, no connections to the hosts themselves.

Honeypot sensor network

A distributed network of honeypots captures live attacker and scanner behavior in real time, feeding fresh threat intelligence into whack.sh and our cybersecurity services.

Built for resilience

Read replicas, regional failover, and no single-region dependency keep the fleet online. The network is designed to lose a site without losing service.

The Fleet That Runs on It

IP intelligence & continuous internet measurement

Multi-egress URL threat scanner

Anonymous external security scans

Anonymous HTTP inspection

Screenshot-as-a-service API

issued.live

Soon

SSL & domain-issuance tracking

…and the wider Tuxxin Stack.

Network & Geolocation, Answered

We build and operate it ourselves — our own points of presence, our own peering at internet exchanges, and a continuously-replicated backbone. There is no reseller in the middle and no single-cloud lock-in.

Two reasons. Peering shortens network paths and reduces transit dependence, which improves speed and resilience. More importantly, each exchange is a measurement vantage point — the more directions we can observe an IP address from, the more accurately we can triangulate where it actually is. That is the foundation of the IP geolocation database we are building.

Legacy databases largely report where an address block was registered, which increasingly does not match where it actually answers from — proxies, VPNs, carrier-grade NAT, and re-homed blocks all break registration-based geolocation. We measure each address from many vantage points and triangulate its real location from network latency and topology, with first-class detection of proxies and VPNs.

No. Our measurement uses standard DNS PTR lookups — the same public queries any recursive resolver makes. No ports are scanned and no connection is made to the addresses themselves.

Build on Our Network

Need low-latency, multi-region infrastructure with real threat-intel behind it? Let's talk.

Get in Touch
Share: 𝕏 Twitter Facebook LinkedIn