Skip to main content
Version: 2.1.0

Improve peer-to-peer connectivity

The Ethereum proof-of-stake architecture is designed to be a fully peer to peer (P2P) network. This section describes how to configure the Prysm beacon node and your network to optimise the number of peers that you communicate with on the Ethereum proof-of-stake etwork. Increasing peers helps improve the health, performance and stablity of nodes and the overall network.

NOTICE: This section contains advanced network configurations and is optional.

Ethereum proof-of-stake leverages libp2p, a framework and suite of protocols for building peer-to-peer network applications. When a beacon node first starts up, it does two things to start communicating with other participants:

  • Begins listening for new incoming P2P connections
  • Starts a discovery process to find and connect to new peers

P2P Network Diagram

Home networks & routers#

Many participants on the Ethereum proof-of-stake network operate their nodes on a home network. Home networks typically have a router that provides a logical boundary between your private home network, and the public internet. While this is good for keeping bad traffic out of your network, it presents a challenge for communicating with other nodes who are also on home networks.

Virtual public cloud (VPC) networks#

Other participants on the Ethereum proof-of-stake network operate their nodes on a virtual public cloud (VPC) instance. This is basically a computer running in a datacenter that quite often is directly connected to the public internet.

Incoming P2P connection prerequisites#

In order for other participants on the Ethereum proof-of-stake network to establish incoming P2P connections with your beacon node, a number of conditions must be met:

  1. Your public IP address must be known.
  2. The protocol (TCP/UDP) and port number (0-65535) on which your beacon node is listening must be known (Default - TCP/13000 and UDP/12000).
  3. All routers & firewalls must be configured to allow incoming traffic on that protocol/port combination.

Private IP addresses#

Computers on a home network will typically have a private IP address. Attempting to establish a P2P connection to another participant on the Ethereum proof-of-stake network using that participant's private IP address is not possible, you must use the public IP address. Private IPv4 addresses will always fall into one of the following ranges, as per RFC1918:

  • 192.168.0.0 – 192.168.255.255
  • 172.16.0.0 – 172.31.255.255
  • 10.0.0.0 – 10.255.255.255

NOTICE: You may have more than one private IP address

To determine your private IP address, or run the appropriate command for your OS:

GNU/Linux:

ip addr show | grep "inet " | grep -v 127.0.0.1

Windows:

ipconfig | findstr /i "IPv4 Address"

macOS:

ifconfig | grep "inet " | grep -v 127.0.0.1

Public IP addresses#

Public IP addresses include all other IP addresses not in the private ranges mentioned above, with some exceptions for Special-Use IPv4 Addresses.

To determine your public IP address, visit (http://v4.ident.me/) or run this command:

curl v4.ident.me

Port forwarding#

Participants on home networks will need to configure their router to perform port forwarding so that other Ethereum proof-of-stake participants can establish a connection to your beacon node on TCP/13000 and UDP/12000. The specific steps required vary based on your router, but can be summarised as follows:

NOTICE: Participants with nodes on a virtual public cloud (VPC) instance can skip this step.

  1. Determine the IP address for your home router
  2. Browse to the management website for your home router (typically http://192.168.1.1)
  3. Log in as admin / root
  4. Find the section to configure port forwarding
  5. Configure a port forwarding rule with the following values:
    • External port: 13000
    • Internal port: 13000
    • Protocol: TCP
    • IP Address: Private IP address of the computer running beacon-chain
  6. Configure a second port forwarding rule with the following values:
    • External port: 12000
    • Internal port: 12000
    • Protocol: UDP
    • IP Address: Private IP address of the computer running beacon-chain

There are many websites available with more detailed instructions on how to perform the steps above on your specific router. A quick search should help get you started. Feel free to ask for help in our Discord.

To determine the IP address for your home router, run the appropriate command for your OS:

NOTICE: You may have more then one gateway IP address

GNU/Linux:

ip route | grep default

Windows:

ipconfig | findstr /i "Gateway"

macOS:

netstat -nr | grep default

Firewalls#

Many computers have a local firewall that blocks incoming connections. Ensure that you have configured the firewall to allow incoming connections on TCP/13000 and UDP/12000 from all source IP addresses.

Setting the --p2p-host-ip or --p2p-host-dns flag#

The beacon node needs to know what your public IP address is so that it can inform other peers how to reach your node. Do this by including either the --p2p-host-ip=<your public IP> or, if you have a valid DNS record --p2p-host-dns="host.domain.com" flag when you start up the beacon-chain.

For DNS:

prysm.sh beacon-chain --p2p-host-dns=host.domain.com

On GNU\Linux, MacOS, and ARM:

prysm.sh beacon-chain --p2p-host-ip=$(curl -s v4.ident.me)

Windows:

for /f %i in ('curl -s v4.ident.me') do set PRYSM-P2P-HOST-IP=%iprysm.bat beacon-chain --p2p-host-ip=%PRYSM-P2P-HOST-IP%

NOTICE: If you are using this command in a .bat script, replace both instances of %i with %%i.

Verifying --p2p-host-ip or --p2p-host-dns settings#

To verify the --p2p-host-ip or --p2p-host-dns settings are operating correctly, use MX Toolbox TCP Lookup tool.

Enter the IP Address or DNS Name of the node, followed by :13000 and click "TCP Lookup".

If the results are as below, then the settings are correct:

image