Monero Full Node: Privacy Coin Node Tren VPS

Monero co bao mat giao dich on-chain rat manh, nhung lop network van co the ro ri metadata. Khi wallet ket noi den remote node:

• Remote node thay duoc IP cua ban: Lien ket dia chi IP voi viec su dung XMR, du khong thay duoc giao dich.
• Remote node co the deceive ve fee estimate va block height: Du khong steal duoc XMR, co the gay phien toai.
• Tim kiem decoy ring members: Node phai biet UTXO set de chon decoy. Voi remote node, ban phu thuoc vao tinh ngau nhien cua nguoi khac.

Voi Monero full node rieng tren VPS Iceland:

• Wallet ket noi vao localhost qua Tor hidden service: Khong ai biet IP cua ban va cung khong ai biet IP cua node ngoai jurisdiction Iceland.
• Iceland privacy law: ISP va co quan giam sat khong the de dang yeu cau metadata.
• Ho tro mang Monero: Moi node tang resilience cua P2P network.
• Trang bi mining solo: Co kha nang tu mine XMR voi node + xmrig (mac du pool mining hieu qua hon).

Monero mainnet hien tai chiem khoang 200GB dia. VPS AnubizHost goi Pro voi 100GB hoac Storage voi 1.5TB phu hop, tuy thuoc co prune blockchain hay khong.

Tai Monero CLI tu getmonero.org va xac minh chu ky:

wget https://downloads.getmonero.org/cli/monero-linux-x64-v0.18.3.1.tar.bz2
wget https://www.getmonero.org/downloads/hashes.txt
# Xac minh
sha256sum monero-linux-x64-v0.18.3.1.tar.bz2
# So sanh voi hashes.txt
tar -xjf monero-linux-x64-v0.18.3.1.tar.bz2
mv monero-x86_64-linux-gnu-v0.18.3.1/* /usr/local/bin/

Tao user va data directory:

useradd -m -s /bin/bash monero
mkdir -p /var/lib/monero
chown monero:monero /var/lib/monero

File /home/monero/.bitmonero/bitmonero.conf:

data-dir=/var/lib/monero
log-file=/var/log/monero/monero.log
log-level=1
rpc-bind-ip=127.0.0.1
rpc-bind-port=18081
restricted-rpc=1
confirm-external-bind=0
no-igd=1
p2p-bind-ip=0.0.0.0
p2p-bind-port=18080
hide-my-port=1
out-peers=64
in-peers=24
prune-blockchain=1

Tao systemd unit:

# /etc/systemd/system/monerod.service
[Service]
User=monero
ExecStart=/usr/local/bin/monerod --config-file=/home/monero/.bitmonero/bitmonero.conf --detach
Restart=always
TimeoutStopSec=300

Khoi dong va sync. Voi prune-blockchain=1, sync chi mat 1-2 ngay va chiem ~80GB. Voi full archive (khong prune), khoang 200GB va 2-4 ngay.

De wallet ket noi vao node ma khong ro ri IP, cau hinh Tor hidden service:

apt install -y tor
# Sua /etc/tor/torrc, them:
HiddenServiceDir /var/lib/tor/monero/
HiddenServicePort 18081 127.0.0.1:18081
systemctl restart tor
# Lay onion address
cat /var/lib/tor/monero/hostname

Address dang xxxxx.onion. Trong wallet Monero CLI hoac GUI, cau hinh:

# Wallet CLI
monero-wallet-cli --proxy=127.0.0.1:9050 \
  --daemon-address=xxxxx.onion:18081 \
  --trusted-daemon

# Wallet GUI: Settings -> Node -> Remote node
# Address: xxxxx.onion
# Port: 18081
# Proxy: SOCKS5 127.0.0.1:9050

Voi cau hinh nay:

• Wallet ket noi qua Tor, ISP cua ban khong thay du lieu Monero traffic.
• Node tren VPS Iceland chi thay traffic den tu Tor exit, khong thay IP cua ban.
• Tat ca giao dich gui di duoc validate boi node rieng cua ban, decoy chon tu UTXO set ma node biet.

Bao mat them: Bat p2p-use-ipv6=0 de tranh ro ri qua IPv6. Su dung UFW chan tat ca incoming tru cong 18080 (p2p) va 22 (SSH). Backup wallet seed offline tren giay hoac steel plate - KHONG luu digital. Voi cau hinh nay, ban dat duoc cap do bao mat va privacy ma chi co Monero full node rieng tren VPS offshore co the cung cap.