How can I configure my node such that it is secure for public access?

I am aware that I can use either the --remote-limit-api launch argument, or by setting it in my ini;


Which commands should I disable on a public node?

Which commands are required for client / wallets to be able to connect properly?


If possible, you should make it available via HTTPS as well (as some wallets will only talk to HTTPS nodes).

You should definitely disable commands related to neighbors, otherwise others could remove your neighbors or add some others (to send them an UDP flood).

The official GUI wallet needs the following commands:

  • getNodeInfo - to retrieve the latest milestone hash (needed to check whether a transaction is confirmed)
  • findTransactions and getTrytes - to show transaction history and find which addresses are already used
  • getInclusionStates - to query whether a transaction is confirmed
  • getBalances - to show the current wallet balance
  • getTransactionsToApprove - to find out where to attach to the tangle
  • storeTransactions - to save a transaction once it is finished (POW is made)
  • broadcastTransactions - to "rebroadcast"

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.