Skip to main content
21 votes
Accepted

How to secure baking node from attacks like DDOS?

9732 is the default port for P2P connections, can be overridden with --net-addr=ADDR:PORT when starting the node 8732 is the default port for RPC connections, can be overridden with --rpc-addr=ADDR:...
xtzbaker's user avatar
  • 1,379
21 votes
Accepted

How do I upgrade a Tezos node?

git checkout mainnet && git pull && make build-deps && eval $(opam env) && make
Blindripper's user avatar
  • 2,635
17 votes
Accepted

Garbage Collection

Each Tezos node maintains a representation of the current state of the ledger. That state includes things like the storage of each contract, the balance of different addresses, etc. The goal of the ...
Arthur B's user avatar
  • 4,599
17 votes
Accepted

Where precisely lies the trust in a snapshot?

Here is how the import works for you: you download a snapshot from a usb key found in a dark alley you start importing it, it displays the block hash it is importing you check in several places that ...
SwokTlak's user avatar
  • 341
12 votes

How should one kill the tezos-node process?

Your should use "Ctrl+c" (or kill -15 <Process-ID>) to terminate tezos node. This will take some time because the node tries to softly cancel all scheduled actions, and to keep the database in a ...
iguerNL's user avatar
  • 1,151
12 votes

How to secure baking node from attacks like DDOS?

@xtzbaker is spot on with the ports that the node uses. Preventing DDoS for the baking node is also one of the reasons that the most common setup for baking is to have a private baking node with ...
Frank's user avatar
  • 2,632
11 votes
Accepted

How to recover from "No space left on device" error?

The clue to the solution is in the part of the error saying that Validation of block BK... failed. It seems that it wasn't checking to see if there was any new free disk space available, it was just ...
Bake ꜩ for Me's user avatar
10 votes
Accepted

Access to the mempool

You can view the mempool via this RPC API endpoint. You currently can't manipulate the mempool with the RPC API. You can change the mempool filter settings though (which are used to filter out ...
Stephen Andrews's user avatar
10 votes

What are the best practices for hosting Tezos nodes with exposed RPCs?

What we do for TezRPC (which powers TezBox) is run a proxy on each server. Within this proxy, you can then block, restrict and customize public facing endpoints. We currently use a light proxy built ...
Stephen Andrews's user avatar
10 votes
Accepted

Does the baker, endorser and accuser have to run next to the same node?

The endorser and accuser don't need to run on the same system as a node. They can run on a completely separate system, or on the same system (your choice), and only require communication with the ...
Luke Youngblood's user avatar
9 votes
Accepted

How to make a tezos node set CORS headers

You need to start the node with these options: --cors-header='content-type' --cors-origin='*'. Once you’ve started the node with these options the response headers should allow a JavaScript ...
Luke Youngblood's user avatar
9 votes
Accepted

Binding the node to any address, not just localhost

If you are using a configuration file, there are two different ports : the "listen-addr" option can be used both in the "p2p" section and in the "rpc" section. You can use "0.0.0.0:8732" for example ...
lefessan's user avatar
  • 3,308
9 votes

Error when updating the node

Try the following in the tezos folder: Update your packages: sudo apt-get update sudo apt-get dist-upgrade Make sure to have the right version of the code and clean everything: git fetch origin ...
jdsika's user avatar
  • 787
9 votes

How to solve Permission denied error on Mac when setting up a Tezos node and running alphanet.sh

You'll need to do chmod +x alphanet.sh again after the script was updated from .alphanet.sh update_script. Basically, the file lost its executable permission after being overwrittened (since it's a ...
Frank's user avatar
  • 2,632
8 votes
Accepted

Does building a node require syncing the block and context data from scratch?

It's possible to start with tezos-node data from another node and finish the sync from there. I do this by running the new tezos-node briefly to have it create ~/.tezos-node and the usual files in ...
Fred Yankowski's user avatar
8 votes

Too few connections, config.json?

Is your node in private mode ? It's bizarre to only have 5 connections while there are hundreds of peers in the networks. Have you tried to restart your node ? and/or to generate a new identity ? ...
iguerNL's user avatar
  • 1,151
8 votes

Too few connections, config.json?

Ok, i've tried to open ports, generated a new identity, added peers manually (like iguer) adviced, but nothing helped. But a guy called "Krixt" in the Tezos Baking slack wrote this script: #!/bin/...
Blindripper's user avatar
  • 2,635
8 votes
Accepted

Is it possible to run alphanet and zeronet nodes from the same server that is running a mainnet node?

As for how to run the three separate nodes, to build off of adrian's answer you could use the following options when running the node: /home/tezos/tezos_mainnet/tezos-node run --data-dir /home/tezos/....
AKISH's user avatar
  • 421
8 votes
Accepted

Node synchronization

To accelerate the process you need a fast internet and a good ssd since synchronization is heavy on I/O. You should also add the main peers to your node, @utdrmac shared a shell script for that: ...
Rodrigo Quelhas's user avatar
8 votes

Tezos main net node: Hardware specs

CPU: nothing special, a couple of GHz will do, tezos supports multi-core well MEMORY: see my plot below. Seems like >4GB makes sense. 8GB should be enough. STORAGE: Random read and random write >...
Phlogi's user avatar
  • 420
7 votes
Accepted

Roll size and node performance

Just asked that question at riot. The answer from our very wise Adrian Brink:
Blindripper's user avatar
  • 2,635
7 votes
Accepted

What are the best practices for hosting Tezos nodes with exposed RPCs?

Either: don't expose the RPC at all (!), or put a proxy in front with a maximally restrictive whitelist. Of course, for a whitelist to help, you must not include potentially harmful endpoints in ...
Tom's user avatar
  • 2,506
7 votes
Accepted

What are the best practices for increasing node connectivity / number of peers?

On your side, a first step would be to set --connections option to eg. 1000 or 10000 (assuming you have enough resources for that. I remember there was an issue with the number of opened file ...
iguerNL's user avatar
  • 1,151
7 votes
Accepted

How do I get a list of baking rights for a wallet address using the RPC API?

GET ../<block_id>/helpers/baking_rights?(level=<block_level>)*&(cycle=<block_cycle>)*&(delegate=<pkh>)*&[max_priority=<int>]&[all] Retrieves the list ...
Andreas Tissen's user avatar
7 votes
Accepted

Too few connections, config.json?

Some "just started node" sometime ends up in a situation like that and work is done to get rid of the problem. The scenario is the following: The bootstrap peers accept a big number of connection so ...
Pierre Boutillier's user avatar
7 votes
Accepted

Forging operations - what is the purpose of this?

From a high level perspective the purpose of forging is to convert a set of inputs along with the kind of operation you wish to perform (eg: send money, to whom, from whom, how much etc) into a single ...
Ezy's user avatar
  • 6,064
6 votes

What are the best practices for hosting Tezos nodes with exposed RPCs?

When you only need the RPC for yourself you could also use ssh local port forwarding to forward the RPC from the localhost of your remote machine to the localhost of your local machine. For instance, ...
cryptodad's user avatar
  • 923
6 votes

What are the best practices for hosting Tezos nodes with exposed RPCs?

One of the alternatives i could think of, is using Conseil: https://github.com/Cryptonomic/Conseil In my humble understanding what Conseil does, is provide an extended API on top of a tezos-node/rpc. ...
Matej maht0rz Šima's user avatar
6 votes

What should I do about "connection from untrusted peer" reports from tezos-node?

I saw an answer to this on Riot for the same question: You could change the IP address of the node. If other peers know your IP address you cannot do anything against connection attempts. I ...
amerjustice's user avatar
6 votes

How do I remove the private mode setting from my node? My node is not connecting to peer

If you want to remain in private-mode, you must provide an argument --peer node:port when starting your node, or edit the config.json file of the node to add such peers (which is better, as it will be ...
lefessan's user avatar
  • 3,308

Only top scored, non community-wiki answers of a minimum length are eligible