View source for Node Provider Decentralization and Security Guide


===Decentralization | |===
As a Node Provider, you are a defender of the Internet Computer's decentralization. Here are some recommendation to maximize your decentralization contribution:
*<span class="s1"></span>Be as independent as possible from other Node Providers<span class="s1"></span>
**<span class="s1"></span>Do not own shares in multiple Node Provider organizations<span class="s1"></span>
**<span class="s1"></span>Have only a single Node Provider identity<span class="s1"></span>
**<span class="s1"></span>When seeking support/discussion, use public channels so that Node Provider interaction is transparent<span class="s1"></span>
**<span class="s1"></span>While other Node Providers may offer advice, you're fully responsible for and in charge of your own nodes<span class="s1"></span>
*<span class="s1"></span>Be vigilant<span class="s1"></span>
**<span class="s1"></span>Be independent minded, make your own decisions and do not blindly trust 3rd party advice (DFINITY is also a 3rd party that should not be blindly trusted and that holds no special authority over the Internet Computer)<span class="s1"></span>
**<span class="s1"></span>Be aware that misinformation can be used as an attack vector, and therefore, it is important to verify information from multiple sources (preferably public and authenticated)<span class="s1"></span>
**<span class="s1"></span>If you suspect somebody is trying to deceive you, it may be helpful to other Node Providers and other members of the IC community if you use public channels to warn them<span class="s1"></span>
*<span class="s1"></span>Restrict access to node machines<span class="s1"></span>
**<span class="s1"></span>Whenever possible, it is best to perform all node-maintenance yourself and to avoid 3rd-party support all together<span class="s1"></span>
**<span class="s1"></span>When 3rd-party servicing is necessary, use a local service (preferably somebody you know and trust) rather than a global one and carefully monitor their work<span class="s1"></span>
*<span class="s1"></span>Use local and trusted supply chains<span class="s1"></span>
**<span class="s1"></span>If possible, purchase hardware locally from a trusted vendor to avoid global single points of failure and to reduce the risk that somebody tampers with your hardware during delivery<span class="s1"></span>
*<span class="s1"></span>Avoid single points of failure in Node Provider organizations with multiple people<span class="s1"></span>
**<span class="s1"></span>When possible, use the four-eyes principle<span class="s1"></span>
**<span class="s1"></span>For transparency about your decentralization contribution, you may provide a description of your internal security controls against single-person access in your [[Node Provider Self-declaration|self-declaration]] (discussed in milestone three)<span class="s1"></span>
**<span class="s1"></span>Restrict access to trusted employees and collaborators and vet new personnel and collaborators<span class="s1"></span>
*<span class="s1"></span>Set up your Node Provider service with a local mindset<span class="s1"></span>
**<span class="s1"></span>Choose a local data center that you can easily reach and inspect<span class="s1"></span>
**<span class="s1"></span>Choose a data center that is not part of a global business to reduce risk from extra-territorial influence<span class="s1"></span>
**<span class="s1"></span>Operate your nodes in the same country as you/your organization reside<span class="s1"></span>
**<span class="s1"></span>Use local employees who live in the same area and that you know yourself<span class="s1"></span>
*<span class="s1"></span>Keep information relating to decentralization up-to-date<span class="s1"></span>
**<span class="s1"></span>For example, if you relocate, you should report this to the NNS<span class="s1"></span><span class="s1"></span><span class="s1"></span><span class="s1"></span><span class="s1"></span>
===Security | |===
*Lock up your hardware
**Understand and v<span class="s1"></span>erify the physical access control to your node machines in the data centers<span class="s1"></span>
**Determine who should be authorized to use the devices that comes in contact with the node machines (USB sticks, HSMs, network cables, laptops, etc.) and prevent unauthorized physical access through safe storage and alarm systems
**Establish safe work practices, e.g., four-eyes principle when accessing node machines or using other devices to avoid tampering with them
**Determine who should have physical keys to access hardware and instruct them to keep the keys safe
**Keep devices disconnected from the Internet except when strictly necessary to be online
*Store passwords and secret keys safely
**Use key splitting to back them up in a way that no single-point compromise will cause loss
*WIP 🚧