21
votes
Accepted
How to secure baking node from attacks like DDOS?
9732 is the default port for P2P connections, can be overridden with --net-addr=ADDR:PORT when starting the node
8732 is the default port for RPC connections, can be overridden with --rpc-addr=ADDR:...
- 1,379
12
votes
How to secure baking node from attacks like DDOS?
@xtzbaker is spot on with the ports that the node uses. Preventing DDoS for the baking node is also one of the reasons that the most common setup for baking is to have a private baking node with ...
- 2,632
10
votes
Can I use multiple ledgers for baking?
It is possible to have a hot-standby signer albeit I would recommend against it.
In order to have a hot-standby, you initialise a second ledger with the same seed as the first one. Then you need a ...
- 1,009
8
votes
Tezos main net node: Hardware specs
CPU: nothing special, a couple of GHz will do, tezos supports
multi-core well
MEMORY: see my plot below. Seems like >4GB makes sense.
8GB should be enough.
STORAGE: Random read and random write >...
- 420
8
votes
Accepted
Adding a ledger to tezos-client
The difference is in the default derivation path suggested by the cli. If you use /0'/0' in both (or nothing in both) you should get the same keys.
The words are derived based on the hash of the root ...
- 4,599
7
votes
Decent bakery architecture?
Looks like a good start.
Unless your (4G)-router has a battery consider an uninterruptible power source (UPS).
A second laptop with signer and additional ledger on standby in a separate location ...
- 376
6
votes
Docker vs local build for baking on mainnet?
The docker builds are generally aimed at those individuals who are not comfortable with, or have no experience in compiling software. There is no advantage over running docker builds vs compile on ...
- 3,422
6
votes
Accepted
security with solo baker setup
The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication.
This is ...
- 1,096
6
votes
Tezos main net node: Hardware specs
8GB RAM is recommended1 for a node. Kiln recommends 10GB of RAM for example. The mainnet node in my Ubuntu 18.04 Baker/Node doesn't use up a lot of resources from the CPU. However, using an SSD is ...
- 151
5
votes
How long does it take to sync the entire chain?
To fully sync the entire chain from the start should take a little under 24 hours depending on the speed of your SSD. If you are using non-SSD it can take many days and is not recommended.
New ...
- 1,999
5
votes
How to secure baking node from attacks like DDOS?
You could also add an extra layer of security by having your node's internet connection go through a DDoS protected VPN, like OctoVPN https://octovpn.com
- 372
5
votes
Accepted
What are the best cold-storage methods available for XTZ?
Hardware wallets like the Ledger Nano are good cold storage solutions.
Offline-wallet creation in an air-gap device is also a good solution.
Kukai wallet offers you the possibility to do offline-...
- 146
4
votes
Docker vs local build for baking on mainnet?
Of course the use of the Docker makes it easier to build a node, and it is useful for people with an initial level of knowledge of programming on Linux. The fact is that when you build a node for ...
- 119
4
votes
Accepted
Connectivity and fitness of blocks baked
Relationship is not explicit. fitness for a block is just total number of endorsements in the chain that block is extending. If you are well connected with endorsers and bakers, fitness is very likely ...
- 656
3
votes
Why does the Tezos node use only one CPU core?
The performance of syncing an archive node depends on multiple factors including your hardware, network connectivity, number peers etc however one of the dominant one is the intensity of I/O ...
- 6,064
3
votes
Accepted
Can someone give me a noob guide to get eztz up and running on my ubuntu system? I'm getting the following error
npm i eztz wont work.
Instead you can add eztz's git repo as a dependency in your package.json
"dependencies": {
"eztz": "git://github.com/TezTech/eztz.git#...
- 1,345
3
votes
Tezos main net node: Hardware specs
We run our node on Digital Ocean. Our nodes are 2vCPU/2GB RAM/60GB SSD with 4GB swap. We have been running this configuration for 6+ months with no issues. We used to run with 1vCPU, but had lots of ...
- 3,422
3
votes
security with solo baker setup
The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication.
I would ...
- 1,009
3
votes
Accepted
How can i setup delegation with an HSM (Ledger, Trezor)?
First of all, when storing tezos using an HSM one still needs to connect to a node in order to perform operations like transactions or delegation. For this there is the choice between connecting to a ...
- 6,064
3
votes
Accepted
Run Alphanet and Mainnet on the same VPS
Yes, you need a different data-dir, RPC port, and P2P port, like:
--net-addr :10001 --rpc-addr :10002 --data-dir /some/path
The tezos-node executables should be compiled from each respective branch ...
- 532
3
votes
Accepted
Zeronet node doesn't bootstrap
You may need to input a public node to bootstrap in your peer list; https://zeronet.smartpy.io is available.
- 3,260
2
votes
Single ledger to support multiple bakers?
The ledger maintains a HWM (high watermark) for "double bake protection" - this means it will not sign more than 1 block at a certain height. I do not believe it is possible to maintain multiple HWMs ...
- 1,973
2
votes
How can I remove the double timestamps in journald logs for tezos?
For the tezos-node service it is possible to remove the timestamp using a tezos-node configuration with the following additional parameter at the top level:
"log": { "template": &...
- 862
2
votes
I've got 'export TEZOS_CLIENT_UNSAFE_DISABLE_DISCLAIMER=Y' in my bash profile, why does my tezos disclaimer still show?
I figured it out. For some reason, I am running on Mac and had a .bash-profile and .bash_profile. I edited the wrong one. The sudo is for the increase maxfiles, unrelated to the disclaimer removal.
- 209
2
votes
Running a Baking Node on Azure - any considerations?
The most significant benefit of an on premise solution is the availability of devices like the Ledger Nano S which are a proven mechanism for securing your private keys.
With a cloud provider like ...
- 1,379
2
votes
Can I use multiple ledgers for baking?
The main risk with using multiple ledger/bakers is the risk of double-baking/double-endorsing which will make you lose your bond.
So technically the answer to your question is "yes" however to be ...
- 6,064
2
votes
How do I build a Tezos node and start baking from the sources on Ubuntu?
I recently wrote and ansible role to do all this on debian machines :
you can check it out here : https://gitlab.com/abate/training-2020-deploy/-/tree/master/ansible
I'm still working on the ssh ...
- 151
2
votes
Accepted
How do I build a Tezos node and start baking from the sources on Ubuntu?
Here is a step by step updated guide on how to build a Tezos node from the sources on Ubuntu, also see my youtube video:
https://www.youtube.com/watch?v=SAHoF-oO71U
DOWNLOADS AND LINKS
Ubuntu ...
- 703
2
votes
upgrade procedure
If you want your baker to remain active at all times, you need to launch the Hangzhou daemons before the activation and to stop the Granada ones after the activation so for a period of time you will ...
- 2,703
2
votes
Accepted
Error installing tezos-crypto
Because you are in an opam "switch" that uses an old version of the OCaml compiler (4.11.1), you are trying to install the most recent version of tezos-crypto compatible with this compiler ...
Only top scored, non community-wiki answers of a minimum length are eligible