I would like to know how I can secure the Stellar node from unauthorized access. I run a Stellar node (still learning) as a Full validator with the following services on the default port.
- Stellar core (PEER_PORT default 11625 & HTTP_PORT default 11626)
- Horizon (port 8000)
Ideally, who would need access to each of those port? I read the Network Access section at https://www.stellar.org/developers/stellar-core/software/admin.html#network-access. I don't understand that fully.
- My host is behind the firewall with port 11625 closed but still, I see my node running good (ledger hash keeps changing).
- In fact, most of the nodes at https://stellarbeat.io/nodes returns the empty response to the browser on 11625, 11626 & 8000 (I essentially took IBM's nodes as reference)
- If only peers can connect on 11626, how would I know the peer IPs?