5

I was thinking about using Virmach $5.00 Windows server 2012 plan with the following specs:

for example SSD1G 1GB DEDICATED RAM // 1 vCORE // 25GB+ SSD (HW RAID 10) // DDoS Protection Available // 1TB BANDWIDTH// 1GBPS - 10GBPS

Then using bakechain to run a bakery and connect to public nodes until I can set up my own private trusted node(if I find it is worth my time and money).

Is this enough security? If not, how can I beef up the security or what is a recommended vps service?

Thanks in advance,

Mack

7

Short answer is no it is not.

DDOS is actually a secondary security concern when baking. First and foremost you should be securing access to your baking server and your private keys. If someone gains access to your server and your keys they can steal your Tezos which is a lot worse than simply loosing your rewards which is the consequence of a DDOS attack.

There is no single answer to hardening a server but general best practice is to only allow traffic on the ports/protocol you know are needed, regular patching, monitoring and specifically for crypo currencies securing your keys with a hardware security module like a Ledger.

  • 1
    Disagree with base answer. Short answer: yes it is. We use a VPS with similar specs to run our baking service. I would never recommend Windows due to its decades-long history of hacks and security issues. We have hardened our linux install with all best practices and beyond. As xtzbaker says, use the provider's firewall and your OS firewall to only allow connects to 9732 (default node port). Restrict 8732 (RPC) to localhost. – utdrmac Feb 20 '19 at 20:16
3

Highly recommend learning how to bake without bake chain. Running a bakery requires certain skills, like being able to work with the tezos client. If that is too daunting, then frankly, you do not inspire much confidence. Also, using VPS makes using Ledger Nano difficult, which is highly recommended to be used for security purposes. Good luck.

  • Ok, what OS do you recommend I run it on if i use a VPS? The reason I am adamant about using a VPS is because I move apartments soon and don't want to worry about the down-time. – Mack Baise Feb 19 '19 at 15:20
  • Finally figured out the command line! wahoo – Mack Baise Nov 15 '19 at 10:19
  • I have progressed over the past year to running it via the official daemons on github, boy this year has been a learning experience! – Mack Baise Nov 30 '20 at 12:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.