3.3 Security Best Practices

Key Management

1. Generate a new key pair for your validator:

./target/debug/sov-cli keys generate

1. Securely store your private key. Never share it or store it in plain text on your server.

2. Use hardware security modules (HSMs) for additional security if available.

Node Security

1. Keep your operating system and all software up to date.

2. Use a firewall to restrict incoming connections:

   sudo ufw allow 12346/tcp
   sudo ufw enable

3. Disable root SSH access and use key-based authentication.

Network Security

1. Use a VPN or private network for communication between your nodes if running multiple.

2. Implement DDoS protection if your node is publicly accessible.

3. Regularly monitor your node for unusual activity or performance issues.