&gt; (2) There is no good solution for end-to-end transit that copes with the ugliness of endpoint networks.<p>Yes, there is. And it exists right now, and it&#x27;s completely free.<p>TOR.<p>I&#x27;ve been using TOR hidden services for months now. On every machine (Linux), I install TOR and set 22&#x2F;SSH available as a hidden service. This gives me a [HASH].onion address.<p>Now, why is that useful? The Hidden Services gives you a flat address space so that every .onion is reachable easily. There&#x27;s no NAT, no firewalls, no stupid of any sort. And unlike &quot;static IP&#x2F;port forward&#x2F;hole in NAT&#x2F;Dynamic DNS&quot; anti-solution, you install TOR, set up which ports are to be forwarded, and off you go.<p>I&#x27;ve also figured out how to get full .onion resolution on a Linux system as well. That means, instead of having to do a &quot;Run Tor Browser&#x2F;proxy&quot; for every program, you simply use the .onion where you want. The DNS resolver takes care of obfuscation and TOR handing and everything. So that means you could have a list of servers in different physical locations with firewalls, NATS, and other network tools. And you can administer them via CHEF or Puppet or Ansible using a list of .onion in your config files.<p>I use Mosquitto, a MQTT broker to handle my data store. I have sensors in 3 physical different locations (my house, a friend&#x27;s house, and my local hackerspace). I don&#x27;t have access to the border router on 2 of them; but that doesn&#x27;t matter. TOR takes care of all transit.<p>The last piece of this puzzle is Node-Red for handling of IoT data. With the aforementioned DNS solution I figured out, I can pub&#x2F;sub data to my mosquitto broker, sitting on port 8883 on my onion. The Node-Red doesn&#x27;t have to know where the machines are, nor does my Mosquitto broker.<p>My hardware platform is self-made: Arduino Nano clones, nRF24L01+ mesh networking chip, whatever sensors, and the MySensors library. Works really well.<p>Tl;Dr. An IoT system that guarantees anonymity, privacy, and security. And doesn&#x27;t rely on someone else&#x27;s machines.