Open IvanAnishchuk opened 1 month ago
Sure, feel free to DM me. I'll share my setup with you. I've also developed a solution to deal with smaller attacks that had to do with volume of requests and time connected: https://github.com/sirouk/btt-miner-shield
To be reviewed and integrated
https://discord.com/channels/799672011265015819/1191833510021955695/1237409837101482015
Try this:
ufw allow proto tcp from a.b.c.d port 2000
--axon.external_ip (global accelerator IP)
and--axon.external_port
to the global accelerator IP (if it doesn't match the port on the gpu instance) (and be sure to modify the code base to ensure axon init passes the entire config, something this repo does not do, e.g.self.axon = ...(..., config=self.config)
Update your open file limit and experiment with client_body_timeout, client_header_timeout, and send_timeout to reduce the likelihood of a slowloris type of attack. Also optionally update the location directive to only allow the specific synapses for that miner. If you really want to get fancy you could also continuously query the metagraph for list of validator IPs and update the location directive with
allow
anddeny
directives, i.e. deny everything not coming from validator IP.