You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The **Mithril relay** node serves as a forward proxy, relaying traffic between the **Mithril signer** and the **Mithril aggregator**. When appropriately configured, it facilitates the security of the **block-producing** node. You can use `squid` to operate this forward proxy, and this section presents a recommended configuration.
514
+
- If you have already installed `Squid` via `apt` package manager, we recommend that you delete it before manually building it from source by running the commands: `sudo apt remove squid` and `sudo apt autoremove`.
515
+
516
+
- The FAQ for compiling `Squid` is available [here](https://wiki.squid-cache.org/SquidFaq/CompilingSquid).
517
+
518
+
- You will need a C++ compiler that can be installed with `sudo apt install build-essential` command.
515
519
516
520
:::
517
521
518
-
Verify that the service was correctly configured at installation:
522
+
On the [Squid page listing released versions](https://www.squid-cache.org/Versions/) identify the latest stable released version (currently `6.9`) and download it:
The **Mithril relay** node serves as a forward proxy, relaying traffic between the **Mithril signer** and the **Mithril aggregator**. When appropriately configured, it facilitates the security of the **block-producing** node. You can use `squid` to operate this forward proxy, and this section presents a recommended configuration.
574
+
575
+
:::
576
+
524
577
Make a copy of the original configuration:
525
578
526
579
```bash
@@ -577,6 +630,7 @@ cache deny all
577
630
578
631
# Deny everything else
579
632
http_access deny all
633
+
580
634
EOF'
581
635
```
582
636
@@ -632,6 +686,7 @@ cache deny all
632
686
633
687
# Deny everything else
634
688
http_access deny all
689
+
635
690
EOF'
636
691
```
637
692
@@ -657,33 +712,79 @@ With this configuration, the proxy will:
657
712
- anonymize completely the traffic and avoid disclosing any information about the block-producing machine
658
713
- deny all other traffic
659
714
660
-
Restart the service:
715
+
:::info
716
+
717
+
:::
718
+
719
+
### Installing the service
720
+
721
+
Create (or re-use) an unpriviledged system user on the machine:
0 commit comments