Report

How Solana Works — A Clock, Not a Consensus

Most blockchains burn their effort agreeing on one thing: what happened, and in what order. Without a trusted clock, nodes gossip back and forth until they converge — and that messaging is the bottleneck that caps throughput. Solana's founding bet, made by Anatoly Yakovenko in 2017, was that if you could give the network a verifiable sense of time before consensus even starts, everything downstream gets faster. That bet is Proof of History, and understanding it is the key to understanding the whole chain.

Signal over noise: Proof of History is the most misunderstood primitive in crypto. It is not Solana's consensus mechanism. It is a clock. Get that one fact right and the rest of the architecture falls into place.

2017
PoH whitepaper · Yakovenko
~400ms
Slot time (4 slots / leader)
SHA-256
The hash chain that is the clock
PoS
Security via Tower BFT
~710K
Theoretical TPS ceiling (whitepaper)
Monolithic
One global state, no shards

A short history

Yakovenko began sketching the approach in 2017 and published the Proof of History whitepaper in November 2017. The first prototype was code-named "Loom" — then renamed Solana (after a beach town near San Diego) to avoid confusion with the Ethereum-based Loom Network. Solana Labs was incorporated in 2018. The stated goal was to take on the so-called blockchain trilemma — throughput, decentralization, security — though in truth the early whitepaper led with one word above all others: scalability.

Proof of History — the clock

Here is the mechanism, stripped to its core. Take a SHA-256 hash. Feed its output back in as the next input. Do it again. And again — millions of times, sequentially, on a single CPU core. Because each hash depends on the one before it, the resulting chain is a verifiable record of the passage of time: you cannot have computed hash number one million without having computed the 999,999 before it. Stamp events (transactions) into that stream and you get an immutable, after-the-fact-undeniable ordering of what happened and roughly when.

The elegance is in the asymmetry: the chain must be generated on one core (it's inherently sequential), but it can be verified in parallel across thousands of cores — a GPU checks the whole thing at once. So validators don't have to chatter to agree on order; they just read where the hash chain is.

A nuance worth stating honestly: Solana's own docs call PoH a "Verifiable Delay Function." Cryptographers push back on the strict label — a true VDF must be asymptotically faster to verify than to produce, while PoH verification is merely parallelizable. Useful shorthand; not a precise one.

Tower BFT — the actual consensus

If PoH is the clock, Tower BFT is the agreement layer. It's a custom variant of PBFT (Practical Byzantine Fault Tolerance, 1999) layered on Proof of Stake. Its trick: it uses the PoH clock "before consensus" as a shared time reference, so BFT timeouts can be encoded directly into the ledger instead of negotiated in real time over the wire. Validators reference PoH timestamps rather than exchanging waves of messages — which is how block production avoids waiting on the previous block. Solana's own article is titled, plainly, "Tower BFT: Solana's High Performance Implementation of PBFT."

The network runs on ~400ms slots, and each slot leader is handed four consecutive slots (~1.6s) before rotation. At any moment a single leader generates the PoH sequence and orders transactions against in-RAM state, while verifiers re-execute those transactions and publish signed votes.

Sealevel — why Solana runs transactions in parallel

Ethereum's EVM executes contracts one at a time. Solana's runtime, Sealevel (the Solana Virtual Machine), does not — and the reason is a single clever requirement: every transaction must declare up front which accounts it will read and which it will write. Armed with that map, the scheduler can run any transactions whose writable accounts don't overlap simultaneously, across all available cores. Two unrelated swaps touching different pools? Parallel. Two transactions fighting over the same account? They serialize. (Solana is no longer alone here — Sui, Aptos, Sei, and Monad ship parallel runtimes too — but it pioneered the declared-access model at scale.)

Gulf Stream and Turbine — the network plumbing

Two more pieces make the throughput real:

  • Gulf Stream removes the mempool entirely. Because PoH yields a deterministic leader schedule (everyone knows who leads each slot, an epoch ahead), clients and validators forward transactions straight to the current and next ~2 leaders instead of into a shared pending pool. Transactions carry a recent blockhash valid for ~150 slots (~1 minute); after that they're dropped, not queued — so on Solana you build retry logic, and there's no public mempool to front-run from. (Ingress moved from UDP to QUIC in late 2022, with stake-weighted quality-of-service.)
  • Turbine propagates blocks BitTorrent-style: the leader shatters a block into small "shreds" and fans them down a stake-aware tree rather than broadcasting whole blocks to everyone. Peers reassemble. Gulf Stream handles ingress to the leader; Turbine handles egress from it.

All of this sits on a single, monolithic global state — no shards, no rollups. Solana scales up (faster hardware + parallelism) rather than out, and the reward is atomic composability: every program can call every other in one transaction, no bridging.

The honest performance picture

The whitepaper math gives a theoretical ceiling near 710,000 TPS on a 1 Gbps link (1 Gbit/s ÷ a ~176-byte minimum transaction). That is a ceiling, not a cruising speed — real-world throughput lands around 4,000–4,500 TPS. Be skeptical of the round numbers that float around social feeds: the popular "50,000–80,000 TPS," "~800ms block time," and "deterministic finality the instant ⅔ vote" claims do not survive scrutiny, and we don't repeat them here.

The scars, and the repairs

That single-state, high-performance design has a cost: validators need serious hardware (high-core CPUs, 128–256GB RAM, NVMe, ~1Gbps+), which raises the cost of running one and pressures decentralization. And Solana has halted more than once — the ~17-hour outage in September 2021 (a bot-driven token launch exhausting resources), several 2022 incidents, and a multi-hour halt in February 2024 — each followed by a coordinated restart and hardening (QUIC, stake-weighted QoS, runtime fixes).

Two upgrades target exactly this:

  • Firedancer — an independent validator client built from scratch by Jump Crypto, ~94% C, with a concurrency model borrowed from high-frequency trading. Its hybrid form, Frankendancer, is live on mainnet-beta; the full client isn't production-ready yet. The point is client diversity — ending the single-client risk that makes one bug a network-wide event.
  • Alpenglow — a next-gen consensus (components Votor + Rotor) meant to replace Tower BFT's voting and push finality toward ~150ms. In active testing as of 2026; notably, it also reduces PoH's role in the stack.

Bottom line

Solana is a coherent set of bets stacked on one idea: fix time first, and throughput follows. PoH gives the network a clock; Tower BFT turns that clock into agreement; Sealevel parallelizes execution; Gulf Stream and Turbine move data without a mempool; and it all runs on one global state instead of many shards. The trade is decentralization margin — heavier nodes, a thinner validator set, a real outage history — spent in pursuit of speed and sub-cent fees. Whether that trade ages well depends on Firedancer and Alpenglow landing. The architecture, at least, is no accident.


Sources: Solana whitepaper · Proof of History / Tower BFT · Gulf Stream · 8 Innovations (Turbine, Sealevel) · Firedancer (GitHub) · Helius — consensus · Anatoly Yakovenko / history

Not financial advice. An automated technical explainer; architecture claims were adversarially fact-checked against primary sources where possible. Some figures are time-sensitive (Firedancer and Alpenglow are mid-rollout) — verify before relying on them.

Related

More like this