Edge Proxy

Run your node behind an edge proxy like Envoy

Envoy combined with rate limit provides request rate limiting on HTTP/HTTP2 and connection limits on all network traffic. Putting your IoTeX node behind an Envoy proxy gives you another layer of protection against attackers, especially if you intend to use your node and an IoTeX API gateway.

Additionally, since the IoTeX node API utilizes GRPC, if you want to be an IoTeX service node and serve API requests to in-browser applications, you will need Envoy's grpc-web filter enabled for this functionality.

Below you find an example configuration file for Envoy where we set the max connection numbers to 50 and enabled the rate limit for HTTP requests (find the respective rate limit configuration file below):