HN Debrief

There are no instances in ATProto

  • Social Media
  • Infrastructure
  • Open Standards
  • Startups

The post tries to kill off a specific analogy. In Mastodon and much of ActivityPub, an “instance” is the all-in-one unit that hosts your account, runs the app, moderates the community, and federates with other servers. ATProto breaks those roles apart. Your identity and content live on a personal data server, apps read from that data layer, and services like relays or indexes help apps keep up with the network. The point is that asking for “Bluesky instances” imports the wrong mental model, because ATProto is not designed around many copies of one monolithic server.

If you are evaluating open social protocols, do not stop at whether they support self-hosting or multiple servers. Look at which layers are actually interchangeable today, which ones have real independent operators, and whether users can escape a dominant app or host without losing reach.

Discussion mood

Mostly positive on the article as a technical explanation, but skeptical of its framing and completeness. People liked the clearer separation between hosting and apps, yet many felt the post dodged the practical centralization question by focusing on terminology while Bluesky still controls most hosting, the main app, and much of the real user reach.

Key insights

  1. 01

    Moderation is shifted into label services

    ATProto handles a big chunk of what Mastodon instances do through protocol-level labeling and moderation primitives, not just through whichever app happens to be on top. That changes the architecture more than the article made clear. The relevant question is not whether defederation exists, but whether moderation rules can be packaged as reusable services that multiple apps can consume. In ATProto, that answer is at least partly yes through labelers and related tooling, which makes moderation more modular than the instance-wide blocklists common in ActivityPub deployments.

    If moderation portability matters to your product or policy team, look directly at ATProto labelers and app-agnostic moderation APIs. They are one of the few concrete places where the protocol offers a different operating model, not just different jargon.

      Attribution:
    • danabramov #1
    • JoshTriplett #1 #2
  2. 02

    ATProto changes the scaling bottleneck

    The key systems difference is not just that components are separated. It is that PDS servers do not federate with one another at all. Data flows outward to apps, relays, and indexes, so growth scales with the number of apps consuming the network rather than with every host needing relationships with every other host. That is why supporters keep saying Mastodon’s small-server model is the wrong baseline. ATProto moves cost from host-to-host federation toward indexing, storage, and app-layer aggregation, which is a very different scaling profile.

    If you are designing social or collaborative infrastructure, compare where graph growth lands in each architecture. ATProto is optimized for many lightweight hosts plus heavier readers, while ActivityPub tends to bundle both burdens into the same server role.

      Attribution:
    • danabramov #1 #2
    • neko-moe #1
  3. 03

    Decentralization is optional by layer

    A sharp framing that resonated is that ATProto is 'decentralized-optional'. Users can start on the fully first-party stack and peel off only the layers they care about later. A custom domain handle is one step. Self-hosting a PDS is another. Running your own relay and appview is the far end. That staged path is a real usability advantage over systems that force a high-stakes server choice up front, even if it also means most users will stay on the default stack for a long time.

    Treat ATProto as an adoption strategy as much as a protocol design. If you want mainstream users to move toward open infrastructure, gradual exits from the default may work better than requiring ideological commitment at signup.

      Attribution:
    • danabramov #1
    • knotbin #1
    • kyle-rb #1
  4. 04

    The PLC directory is the real central point

    The most credible centralization critique did not target relays. It targeted the PLC directory, the identity registry that currently has a single authoritative implementation and governance path. Defenders argued that this component is deliberately narrow. It is open source, stateless, auditable, and cryptographically verifiable, so the blast radius is smaller than a normal central service. Still, this is the layer where ATProto most clearly asks users to trust one institution today, which makes it the hardest part of the stack to wave away with architecture diagrams.

    When you assess ATProto risk, separate identity governance from app and hosting decentralization. Even if other layers diversify, a single identity root remains a strategic dependency that deserves vendor and governance scrutiny.

      Attribution:
    • danabramov #1 #2
    • pfraze #1
  5. 05

    App durability is ahead of hosting durability

    One subtle but important distinction emerged around failure modes. Public data can survive the death of an app more easily than the death of a host, because apps index user repositories while many users still rely on Bluesky-operated hosting for the canonical copy of their content. There are mirrors and backup efforts in progress, including network-wide archival work, but the comments made clear that backup maturity lags behind the protocol’s portability story. In other words, ATProto already has stronger app replaceability than host replaceability.

    Do not assume protocol portability equals disaster recovery. If you build on ATProto, ask where canonical data lives, how users export it, and what backup path exists if the dominant host disappears.

      Attribution:
    • Groxx #1
    • danabramov #1
    • neko-moe #1

Against the grain

  1. 01

    AppViews are the real instance layer

    A strong minority view said the article wins a semantic argument while ducking the practical one. If who you can see depends on the appview you connect to, and if full-network appviews remain scarce and costly, then ATProto still has an effective 'instance' layer. It is just shifted upward from account host to reader infrastructure. That framing matters because it points to the same concentration risk under a different name.

    Do not let clean component boundaries distract you from where user power actually sits. If visibility and reach depend on a small number of appviews, that is the layer to watch for lock-in and control.

      Attribution:
    • NoGravitas #1 #2 #3
  2. 02

    Relay moderation can still become a choke point

    Some commenters pushed back on the claim that relays are just dumb plumbing. Bluesky already removes some content from its own relay layer for legal or infrastructure reasons, and there is little natural incentive for others to mirror the full firehose independently when a free dominant relay exists. In principle you can switch relays. In practice that only helps if enough alternative relays exist and remain economically sustainable.

    If you care about censorship resistance, count independent full-network relays and mirrors rather than assuming the protocol guarantees them. A hot-swappable layer is only resilient when there are real replacements to swap in.

      Attribution:
    • chokolad #1
    • jazzyjackson #1
    • RobotToaster #1
  3. 03

    The business model may matter more than the protocol

    Several skeptical comments argued that the biggest risk is not technical design at all. Bluesky PBC still anchors the ecosystem with venture funding, and nobody sees a proven revenue model that supports global-scale social infrastructure without the usual slide into ads, rent extraction, or policy capture. ActivityPub’s clunkier model at least has clearer nonprofit, cooperative, and community funding paths today. The concern is that a protocol can be open while the only durable operator remains a conventional startup.

    For strategic planning, evaluate governance and cash flow as first-class architecture constraints. An open protocol with one venture-backed default can still recreate the same platform dependency you were trying to escape.

      Attribution:
    • tptacek #1
    • timbray #1
    • WhyNotHugo #1

In plain english

ActivityPub
A web standard for decentralized social networking where servers exchange posts, follows, and other social data with one another.
AppView
An ATProto service that reads network data, indexes it, and serves an application-friendly view such as timelines, profiles, and threads.
ATProto
The Authenticated Transfer Protocol, an open social networking protocol used by Bluesky that separates identity, data hosting, and app layers.
Blacksky
An independently operated ATProto app and infrastructure stack often cited as proof that a different moderation and app layer can exist outside Bluesky PBC.
Constellation
A shared ATProto indexing service mentioned as an alternative to running your own relay and database stack.
DID
Decentralized Identifier, a standard identifier format meant to let an identity persist independently of any single app or host.
Firehose
A real-time stream of all public events on a network, used here to describe full ATProto event streams served by relays.
Mastodon
A popular social network software built on ActivityPub, often used as the main example of the Fediverse server model.
PDS
Personal Data Server, the ATProto server that stores a user’s account data and signed records.
PLC directory
The Portable Linked Data Challenge directory, an ATProto identity registry used to resolve certain decentralized identifiers and track updates to them.
Relay
An ATProto infrastructure service that collects event streams from many PDS servers and rebroadcasts them so apps do not each need to connect to every host directly.

Reference links

ATProto docs and infrastructure

Third-party ATProto services

  • Constellation
    Named repeatedly as a shared index that some apps use instead of running their own relay stack.
  • PDS directory
    Used to support the claim that there are currently just over 3000 PDS hosts.
  • Community relay list
    Shared as evidence that multiple relays already exist.
  • firehose.network
    Mentioned as a community-run relay developers can use.
  • Northsky Social
    Suggested as an existing alternative host and app combination for LGBT users.
  • mu.social
    Mentioned in the side discussion about editing and alternate app experiences.

Talks and explainers

Related essays and comparisons

Historical and analogy references