hypercore-one / deployment

GNU General Public License v3.0
1 stars 1 forks source link

Add Sentrify Deployment Options for Enhanced Node Security #19

Open coinselor opened 1 month ago

coinselor commented 1 month ago

Enhance the go-zenon deployment script to support a secure sentrify topology, allowing easy configuration of pillar (validator) nodes protected by sentry nodes. This enhancement is inspired by the work of MoonBaZZe: https://github.com/MoonBaZZe/sentrify

Proposed implementation:

  1. Extend the --deploy flag with additional options:

    • --deploy regular: Deploy a regular node (default behavior)
    • --deploy testnet: Deploy a testnet node
    • --deploy sentry: Deploy a sentry node
    • --deploy pillar: Deploy a sentrified pillar node
  2. For the --deploy pillar option:

    • Require the user to specify at least two sentry node addresses
    • Implement automated firewall rules and peer configurations
    • Optimize network settings for the sentrify topology
  3. Add configuration options for customizing:

    • Number of sentry nodes (minimum 2)
    • Connection parameters

This enhancement will improve network security and stability for pillar operators by providing a streamlined way to set up a robust validator infrastructure, while maintaining flexibility for different node types.