Synchronizing state with peers
Essential security configurations: SSH key authentication, disabling root login, Fail2ban, UFW, automatic updates, and systemd sandboxing.
Execution topology, consensus mechanics, and operational assumptions.
Run this single diagnostics command on your host before beginning the installation to ensure you have sufficient compute, disk headroom, and proper privileges:
lscpu | grep "Model name\|CPU(s):"
free -h
df -h /
uname -aRun node software under an unprivileged system user without sudo permissions.
sudo useradd -r -s /usr/sbin/nologin -d /var/lib/node nodeoperator
sudo mkdir -p /var/lib/node
sudo chown -R nodeoperator:nodeoperator /var/lib/node(No output on success)
Configure your server firewall so that P2P gossip ports are accessible to network peers while internal RPC and Engine APIs remain strictly protected from public port scanners.
| Port / Protocol | Interface | Access Level | UFW Command |
|---|---|---|---|
| 22 / TCP | SSH Management | Restricted / VPN | sudo ufw allow 22/tcp |
| P2P Peer Ports | Gossip & Block Sampling | Public (0.0.0.0/0) | sudo ufw allow 26656/tcp |
| RPC / REST / API | Node Query & Transactions | Localhost Only (127.0.0.1) | (Do not open publicly) |
Let us know if you encountered any command errors or out-of-date instructions.