I was thinking about using Virmach $5.00 Windows server 2012 plan with the following specs:

for example SSD1G 1GB DEDICATED RAM // 1 vCORE // 25GB+ SSD (HW RAID 10) // DDoS Protection Available // 1TB BANDWIDTH// 1GBPS - 10GBPS

Then using bakechain to run a bakery and connect to public nodes until I can set up my own private trusted node(if I find it is worth my time and money).

Is this enough security? If not, how can I beef up the security or what is a recommended vps service?

Thanks in advance,


2 Answers 2


Short answer is no it is not.

DDOS is actually a secondary security concern when baking. First and foremost you should be securing access to your baking server and your private keys. If someone gains access to your server and your keys they can steal your Tezos which is a lot worse than simply loosing your rewards which is the consequence of a DDOS attack.

There is no single answer to hardening a server but general best practice is to only allow traffic on the ports/protocol you know are needed, regular patching, monitoring and specifically for crypo currencies securing your keys with a hardware security module like a Ledger.

  • 1
    Disagree with base answer. Short answer: yes it is. We use a VPS with similar specs to run our baking service. I would never recommend Windows due to its decades-long history of hacks and security issues. We have hardened our linux install with all best practices and beyond. As xtzbaker says, use the provider's firewall and your OS firewall to only allow connects to 9732 (default node port). Restrict 8732 (RPC) to localhost.
    – utdrmac
    Feb 20, 2019 at 20:16

Highly recommend learning how to bake without bake chain. Running a bakery requires certain skills, like being able to work with the tezos client. If that is too daunting, then frankly, you do not inspire much confidence. Also, using VPS makes using Ledger Nano difficult, which is highly recommended to be used for security purposes. Good luck.

  • Ok, what OS do you recommend I run it on if i use a VPS? The reason I am adamant about using a VPS is because I move apartments soon and don't want to worry about the down-time.
    – Mack Baise
    Feb 19, 2019 at 15:20
  • Finally figured out the command line! wahoo
    – Mack Baise
    Nov 15, 2019 at 10:19
  • I have progressed over the past year to running it via the official daemons on github, boy this year has been a learning experience!
    – Mack Baise
    Nov 30, 2020 at 12:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.