I think it's fine opening up vhosts/cors configurations for geth for testing purposes.
This came to my radar because I've seen the following logs on a Teku node:
2022-07-01 04:47:59.473 WARN - Eth1 service down or still syncing for 30s, retrying
2022-07-01 04:48:29.426 WARN - Endpoint 191.163.48.6:8545 [1] is INVALID | Still syncing
It wasn't clear in that log line, but this is due to geth having the vhosts limited to "localhost" by default.
Addiitionally I've also set the --bootnodes flag to be empty on the first node to avoid peering up with any statically defined bootnodes in the geth codebase.
I think it's fine opening up vhosts/cors configurations for geth for testing purposes.
This came to my radar because I've seen the following logs on a Teku node:
It wasn't clear in that log line, but this is due to geth having the vhosts limited to "localhost" by default.
Addiitionally I've also set the
--bootnodes
flag to be empty on the first node to avoid peering up with any statically defined bootnodes in the geth codebase.