Skip to content
This repository was archived by the owner on Mar 8, 2023. It is now read-only.

Latest commit

 

History

History
65 lines (42 loc) · 2.64 KB

how-to-setup-network-infrastructure.md

File metadata and controls

65 lines (42 loc) · 2.64 KB
title excerpt
How to setup network infrastructure
General information about the ICON P-Rep election - https://icon.community/iconsensus/

This document is a guideline detailing how to setup network infrastructure on the MainNet.

Intended Audience

We recommend all P-Rep candidates to go through this guideline.

Pre-requisites

We assume that you have previous knowledge and experience in:

  • IT infrastructure management
  • Linux or UNIX system administration
  • Network administration
  • Linux server and docker service troubleshooting
  • Docker container

How to setup network infrastructure

An administrator can set up various networks in order to secure network availability and security. In order to provide Endpoint service through RPC(900 port) we recommend using Reserve Proxy. In addition, by operating a Citizen Node, it can prevent an overload problem.

Endpoint Network Model

In order to operate Endpoint, we recommend using Firewall, Reverse Proxy and SSL certificate.

  1. Single P-Rep ( Security ★ , Availability ★)
    Single P-Rep Networking Model

  2. Single P-Rep/Single Citizen (Security ★★, Availability ★★)
    Single P-Rep/citizen Networking Model

    • Using Citizen Node, P-Reps can protect its network and prevent overload problems.

  3. Single P-Rep/Multiple Citizen (Security ★★★, Availability ★★★)
    Single P-Rep/multiple citizen Networking Model

    • Using LoadBalancer, P-Reps can prevent any network errors and distribute overload problems.

  4. Multiple P-Rep/Multiple Citizen (Security ★★★, Availability ★★★★)
    multiple P-Rep/multiple citizen Networking Model

    • Using LoadBalancer, P-Reps can prevent any network failures and distribute overloaded data

    • P-Reps can be operated by setting Active or Standby status,

How to Secure Your PRep node

P-Rep node operator should have methods to enhance security. Setting throttle by using Nginx as Reserve Proxy, P-Reps can protect its network from DDoS attack and able to build a White IP list based network.

Refer to the link below

Network design for high availability

P-Rep node operators should have methods to enhance the availability of the network. By setting Active or Backup in PaceMaker, P-Reps can enhance the availability of the network.

Refer to the link below