Our Server Infrastructure

Secure

Our Block Producing Servers are not exposed to the public
Management of servers is only allowed and monitored by a Bastion Host Server

Adaptive

Our infrastructure is constantly monitored and able to adapt to any type of attack or failure so our stake pool is always available.

Scalable

Using multiple cloud services and a portable image, our servers can scale quickly to respond to any DDoS attacks.

Always Available

With a mix of redundant relay servers, back-up block producing servers, and bare-metal servers, our stake pool is always available.

Learn more on how Stake Pool Security affects you in our Blog post.

Infrastructure Details

There are three zones that make up our infrastructure:

Public-Facing Network
Private Network
Offline

Access to the servers are protected by a firewall to only allow connections to the Bastion Host Server. The private network can only be accessed through the Bastion Host Server. The Bastion Host monitors SSH activity and adds a layer of protection against adversaries.

Our server keys are always stored offline and transactions are generated offline.

In the public network, we use multiple redundant relay servers operating on the cloud and on bare-metal.

In the private network, we have a main block producing server that is connected to our relay servers. We have back-up block producing servers that can dynamically switch in case the main block producer fails.

All our servers are constantly monitored to ensure constantly availability and shall scale and adapt to any attacks to the infrastructure.