Mesh LLM v1.0: Split 235B Models Across Your LAN with iroh P2P
Mesh LLM v1.0 (July 11, 2026) pools laptops, GPUs, and mini PCs into one OpenAI-compatible API at localhost:9337/v1. Skippy pipeline splits Qwen 235B at 16 tok/s across 2 nodes. iroh QUIC mesh — no central server.
Mesh LLM v1.0 dropped July 11, 2026 — and the pitch from n0's iroh team (Rae McKelvey) is blunt: stop renting racks you don't control. Pool the GPUs already under your desk, expose them as http://localhost:9337/v1, and let the mesh decide whether inference runs locally, routes to a peer, or splits across machines too big for any one box.
No data-center picture. No metered black-box API. Version 1.0 turns that architecture from experiment into something you can install today — ~18 MB node software, 40+ models, and a Hacker News thread already arguing about tokens per second.
When people picture running a large language model, they picture a data center… You send your prompts off to a black box and hope the price, the model, and the privacy policy all stay the way they were when you signed up.
Teams with GPUs in offices, closets, and home labs lack a way to make those machines act as one inference surface. Cloud APIs scale spend with success; local Ollama stacks cap at single-node VRAM.
Mesh LLM's answer: compose hardware you own into an OpenAI client endpoint — same SDKs, same agents, different economics.
Model too large for any single node — layer ranges become pipeline stages
The client never sees Skippy. It still talks to localhost.
Skippy pipeline (layer splits)
Internally "Skippy" partitions by layer range:
Node A: layers 0–15
Node B: layers 16–31
Activations flow A → B → … down the pipe
Listed perf:Qwen 235B A22B (MoE 235B/22B active) — 16 tok/s across 2 nodes on the models list.
HN contributor @i386 (Skippy engine author): home lab with ~5ms latency + jitter between machines; GLM 5.2 split at ~10 tok/s. Works well at metro WAN latency; global WAN slower. Goal: machines without RDMA/NVLink still serve giants you own — then share with team or public mesh.
Architecture — plugins, gossip, QUIC streams
Mesh LLM is pluggable: plugins declare capabilities in manifests; runtime routes calls over MCP, HTTP, inference, and mesh events.
iroh transport layer
Every node boots an iroh endpoint = public key identity. No central coordinator.
iroh provides
Mesh LLM uses it for
NAT hole-punch
Home lab ↔ office peer
Relay fallback
Two regional relays when direct path fails
Authenticated QUIC
Encrypted peer links (HN: "dial-a-key")
Three ALPN protocols:
ALPN
Purpose
mesh-llm/1
Gossip, routing, HTTP tunnels, plugins
mesh-llm-control/1
Owner config sync, attestation
skippy-stage/2
Low-latency activation transport for splits
Inside mesh-llm/1, the first stream byte demuxes traffic:
Byte
Stream
Role
0x01
GOSSIP
Peer announcements (models, GPU, RTT)
0x04
TUNNEL_HTTP
Inference proxied to peer
0x05
ROUTE_REQUEST
"Which models do you host?"
0x06
PEER_DOWN
Dead-peer signal
0x07
PEER_LEAVING
Graceful shutdown
0x08
PLUGIN_CHANNEL
Plugin RPC
0x0e
DIRECT_PATH_REQUEST
NAT traversal address share
explainx.ai read: iroh makes "peer" and "localhost" the same primitive with different endpoint IDs — networking stops being a custom ops project.
Mesh LLM builds its own gossip on top to control admission, version compatibility, and trust for private meshes.
Performance — HN debate and ballpark math
SwellJoe (HN): consumer networks are slow vs local RAM — "Are we talking 1 token per second?"
Counter-evidence:
Data point
Source
16 tok/s · Qwen 235B · 2 nodes
Mesh LLM models list
~10 tok/s · GLM 5.2 split
i386 · 5ms lab latency
Orders of magnitude faster than llama RPC
i386 on staged Skippy vs naive RPC
woadwarrior01 ballpark: transfer roughly 2 × hidden_size × num_shards bytes per token during decode (divide by chunk size on prefill).
Reality check: 16 tok/s is usable for agents, borderline for chat UX — comparable to why teams still pay for GPT-5.6 Sol cloud tokens. Mesh LLM wins on privacy, lock-in, and marginal cost at scale — not raw interactive speed vs a single H100.
Pair with Fable 5 local hardware projections for the macro trend: frontier models eventually fit owned silicon — Mesh LLM accelerates today's gap via networked sharding.
Security notes
Transport: iroh QUIC encryption per endpoint keys
Trust: Private mesh = you control who gets admitted via gossip policy
Ops: Split pipelines multiply attack surface across nodes — patch all peers
Not a replacement for MCP security hardening when agents call tools on mesh-served models.
Throughput depends on GPU tier, quantization, network latency, and split tuning — treat 16 tok/s as a published data point, not a SLA. Verify hardware requirements on the Mesh LLM models list before production workloads.