In the event of applying security patches, system upgrades, etc., how do I ensure the validators that depend on mine will not be affected when I have to turn off my validator?
As an administrator of a validator, you must ensure that the maintenance you are about to take on is safe for the overall network and for your validator. Safe means that the other validators that depend on yours will not be affected too much when you turn off your validator for maintenance and that your validator will continue to operate as part of the network when it comes back up.
If you are changing some settings that may impact network wide settings, such as upgrading to a new version of stellar-core that supports a new version of the protocol or if you’re updating other network wide settings, performi the following steps in order (once per machine if you run multiple nodes).
- Advertise your intention to others that may depend on you. Some coordination is required to avoid situations where too many nodes go down at the same time.
- Dependencies should assess the health of their quorum.
- If there is no objection, take your instance down.
- When done, start your instance that should rejoin the network.
- The instance will be completely caught up when it’s both Synced and there is no backlog in uploading history.
Notes: It can take up to 5 or 6 minutes to sync to the network when you start up. Most of this syncing time is simply stellar-core waiting for the next history checkpoint to be made in a history archive it is reading from.