All our servers are firewall-protected, meaning all incoming and outgoing connections are monitored and strictly controlled. This allows us to protect our internal network of servers from attacks coming from all over the world.
Secure Shell (SSH) is a cryptographic network protocol which gives you remote access to networks over an unsecured network. It essentially creates a highly secure channel between the host and the server. This is the technology we use to interact with our network of servers located all around the world.
Our nodes are being monitored 24/7 through the use of highly informative dashboard tools. If something goes wrong, we immediately know it and can directly react by setting up a new server through the use of our weekly back-up.
We make back-ups of our servers on a weekly basis. This means we don’t just do a back-up of the database of our nodes, we back the whole server up. If something goes wrong, there is nothing to worry about. We can in a matter of minutes set up a new server from scratch using the back-up and get the pool up and running again.
A Virtual Private Cloud network (VPC) is an internal network which allows different hosts to interact on the same network. This allows us to bypass the internet for incoming and outgoing connections, which makes our server network even more secure.
Fail2Ban is a recognized tool in the system administration industry, as it allows network operators to ban specific IP addresses using a set of predefined rules. This protects our internal network of servers incredibly well, on top of our « traditional » firewalls of course.
We have a set of private nodes, which aren’t publicly available. These allow us to make sure that, whatever happens, we always have a plan B for if something goes wrong.
Our block-producing, or the core of our internal network of servers is completely isolated and highly protected. We don’t run any relay nodes on that server, nor any other software.
Most of our servers are bare-metal, meaning they are physical servers which we own. Most stakepools are using VPSs (Virtual Private Servers), multiple virtual servers based on one single physical server. It’s as if you were to split your computer in two virtually, and only completely isolate the two (or more) parts to allow anyone to use the other part. While we also use some VPSs, the core part of our network is based on bare-metal servers in enterprise-grade datacenters. Security is a priority for us, not a marketing trick.
As we use highly secure firewalls and Fail2Ban as well as an internal network to bypass the need for public internet connections of course, our system is fully DDoS-resistant.
On top of our firewalls, Fail2Ban and our internal network to bypass the need for public internet connections, we also use a private (we own it) proxy server giving us a fixed public IP address. While this may seem like nothing, it allows us to block all the other IP addresses except that one. We are the only ones who can interact with our server network. Fort Knox has a lot to learn.
We are a highly experienced team in the Cardano ecosystem, as 2 of our members are Cardano Ambassadors since mid-2019 and were also chosen by IOHK and the Cardano Foundation as pioneers in the Friends & Family Shelley Haskell Testnet which took place in May 2020.