Hot answers tagged

20 votes
Accepted

How to secure baking node from attacks like DDOS?

9732 is the default port for P2P connections, can be overridden with --net-addr=ADDR:PORT when starting the node 8732 is the default port for RPC connections, can be overridden with --rpc-addr=ADDR:...
user avatar
  • 1,349
12 votes

How to secure baking node from attacks like DDOS?

@xtzbaker is spot on with the ports that the node uses. Preventing DDoS for the baking node is also one of the reasons that the most common setup for baking is to have a private baking node with ...
user avatar
  • 2,602
10 votes

Can I use multiple ledgers for baking?

It is possible to have a hot-standby signer albeit I would recommend against it. In order to have a hot-standby, you initialise a second ledger with the same seed as the first one. Then you need a ...
user avatar
  • 999
8 votes

Tezos main net node: Hardware specs

CPU: nothing special, a couple of GHz will do, tezos supports multi-core well MEMORY: see my plot below. Seems like >4GB makes sense. 8GB should be enough. STORAGE: Random read and random write >...
user avatar
  • 422
8 votes
Accepted

Adding a ledger to tezos-client

The difference is in the default derivation path suggested by the cli. If you use /0'/0' in both (or nothing in both) you should get the same keys. The words are derived based on the hash of the root ...
user avatar
  • 4,409
7 votes

Decent bakery architecture?

Looks like a good start. Unless your (4G)-router has a battery consider an uninterruptible power source (UPS). A second laptop with signer and additional ledger on standby in a separate location ...
user avatar
6 votes

Docker vs local build for baking on mainnet?

The docker builds are generally aimed at those individuals who are not comfortable with, or have no experience in compiling software. There is no advantage over running docker builds vs compile on ...
user avatar
  • 3,364
6 votes
Accepted

security with solo baker setup

The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication. This is ...
user avatar
6 votes

Tezos main net node: Hardware specs

8GB RAM is recommended1 for a node. Kiln recommends 10GB of RAM for example. The mainnet node in my Ubuntu 18.04 Baker/Node doesn't use up a lot of resources from the CPU. However, using an SSD is ...
user avatar
5 votes

How long does it take to sync the entire chain?

To fully sync the entire chain from the start should take a little under 24 hours depending on the speed of your SSD. If you are using non-SSD it can take many days and is not recommended. New ...
user avatar
  • 1,979
5 votes

How to secure baking node from attacks like DDOS?

You could also add an extra layer of security by having your node's internet connection go through a DDoS protected VPN, like OctoVPN https://octovpn.com
user avatar
  • 362
5 votes
Accepted

What are the best cold-storage methods available for XTZ?

Hardware wallets like the Ledger Nano are good cold storage solutions. Offline-wallet creation in an air-gap device is also a good solution. Kukai wallet offers you the possibility to do offline-...
user avatar
  • 146
4 votes

Docker vs local build for baking on mainnet?

Of course the use of the Docker makes it easier to build a node, and it is useful for people with an initial level of knowledge of programming on Linux. The fact is that when you build a node for ...
user avatar
4 votes
Accepted

Connectivity and fitness of blocks baked

Relationship is not explicit. fitness for a block is just total number of endorsements in the chain that block is extending. If you are well connected with endorsers and bakers, fitness is very likely ...
user avatar
3 votes

Why does the Tezos node use only one CPU core?

The performance of syncing an archive node depends on multiple factors including your hardware, network connectivity, number peers etc however one of the dominant one is the intensity of I/O ...
user avatar
  • 6,006
3 votes
Accepted

Can someone give me a noob guide to get eztz up and running on my ubuntu system? I'm getting the following error

npm i eztz wont work. Instead you can add eztz's git repo as a dependency in your package.json "dependencies": { "eztz": "git://github.com/TezTech/eztz.git#...
user avatar
  • 1,320
3 votes

Tezos main net node: Hardware specs

We run our node on Digital Ocean. Our nodes are 2vCPU/2GB RAM/60GB SSD with 4GB swap. We have been running this configuration for 6+ months with no issues. We used to run with 1vCPU, but had lots of ...
user avatar
  • 3,364
3 votes

security with solo baker setup

The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication. I would ...
user avatar
  • 999
3 votes
Accepted

How can i setup delegation with an HSM (Ledger, Trezor)?

First of all, when storing tezos using an HSM one still needs to connect to a node in order to perform operations like transactions or delegation. For this there is the choice between connecting to a ...
user avatar
  • 6,006
3 votes
Accepted

Run Alphanet and Mainnet on the same VPS

Yes, you need a different data-dir, RPC port, and P2P port, like: --net-addr :10001 --rpc-addr :10002 --data-dir /some/path The tezos-node executables should be compiled from each respective branch ...
user avatar
3 votes
Accepted

Zeronet node doesn't bootstrap

You may need to input a public node to bootstrap in your peer list; https://zeronet.smartpy.io is available.
user avatar
  • 3,185
2 votes

Single ledger to support multiple bakers?

The ledger maintains a HWM (high watermark) for "double bake protection" - this means it will not sign more than 1 block at a certain height. I do not believe it is possible to maintain multiple HWMs ...
user avatar
  • 1,973
2 votes

How can I remove the double timestamps in journald logs for tezos?

For the tezos-node service it is possible to remove the timestamp using a tezos-node configuration with the following additional parameter at the top level: "log": { "template": "$(section): $(...
user avatar
2 votes

I've got 'export TEZOS_CLIENT_UNSAFE_DISABLE_DISCLAIMER=Y' in my bash profile, why does my tezos disclaimer still show?

I figured it out. For some reason, I am running on Mac and had a .bash-profile and .bash_profile. I edited the wrong one. The sudo is for the increase maxfiles, unrelated to the disclaimer removal.
user avatar
2 votes

Running a Baking Node on Azure - any considerations?

The most significant benefit of an on premise solution is the availability of devices like the Ledger Nano S which are a proven mechanism for securing your private keys. With a cloud provider like ...
user avatar
  • 1,349
2 votes

Can I use multiple ledgers for baking?

The main risk with using multiple ledger/bakers is the risk of double-baking/double-endorsing which will make you lose your bond. So technically the answer to your question is "yes" however to be ...
user avatar
  • 6,006
2 votes

How do I build a Tezos node and start baking from the sources on Ubuntu?

I recently wrote and ansible role to do all this on debian machines : you can check it out here : https://gitlab.com/abate/training-2020-deploy/-/tree/master/ansible I'm still working on the ssh ...
user avatar
2 votes
Accepted

How do I build a Tezos node and start baking from the sources on Ubuntu?

Here is a step by step updated guide on how to build a Tezos node from the sources on Ubuntu, also see my youtube video: https://www.youtube.com/watch?v=SAHoF-oO71U DOWNLOADS AND LINKS Ubuntu ...
user avatar
1 vote
Accepted

Is it possible to discover a private node from its trusted public node list of peers?

Calling tezos-admin-client p2p stat on node B will list among other things, all active connections. The connections to private node will have the word private near the end of the line. Here is an ...
user avatar
  • 338
1 vote
Accepted

Running an alphanet node

Tezos Alphanet is now called "Babylonnet". Future Testnets will get the name of the actual active (or future) protocol. Follow this guide to setup a Babylon Testnet node.
user avatar
  • 2,638

Only top scored, non community-wiki answers of a minimum length are eligible