Sentry node

A node placed in front of a validator's main node, relaying network traffic so the validator is never directly exposed to the public network. It is a standard denial-of-service protection pattern for validators.

Definition

A sentry node is a buffer. It connects to the public peer-to-peer network on the validator’s behalf and forwards what the validator needs, while the validator itself only talks to its sentries over a private connection. The validator’s real address is never advertised.

The problem it addresses

A validator’s job is to sign blocks on time. Miss enough of them and the network penalises the operator, in some designs by slashing stake.

That makes availability an attack surface. A validator whose address is publicly known can be flooded with traffic until it stops keeping up, and the attacker does not need to break anything cryptographic to cause a loss.

Sentries absorb that traffic. If one is overwhelmed, it is replaced, and the validator carries on because it was never reachable directly.

Why it belongs in a trading glossary

Because chain-level reliability is exchange-level reliability when the exchange runs on its own chain. Whether validators are operated competently decides whether orders are processed and liquidations happen on time.

For a trader this is not a knob to turn, it is part of the risk you accept by using a venue: the quality of its validator set is an input into whether it keeps working under stress.

What it does not do

Sentries protect availability, not keys. A compromised validator key is compromised regardless of what is in front of it, which is why key management is handled separately, typically with dedicated signing hardware.

Where you will run into it

In validator setup documentation for proof-of-stake networks, including chains that host perpetual exchanges, and in discussions of how decentralised a given venue’s operator set really is.