fullmetal.science |

HAProxy configuration to load-balance Monero nodes

2024-06-03T00:00:00+00:00

To get an understanding of HAProxy’s possibilities, I grabbed a list of nodes from monero.fail and created a configuration that load-balances connections among them.

The configuration would allow you to connect Monero to HAProxy, which in turn takes care of selecting a remote node that responds fairly quickly.

However, using HAProxy makes more sense in a scenario where you want to load balance multiple public nodes that you operate yourself.

Note that there’s also a project named Monerod-Proxy that offers similar functionality.

# HAProxy configuration file (stand-alone)
# to load-balance among a list of public Monero nodes
# /etc/haproxy/haproxy.cfg

global
  chroot /var/lib/haproxy
  user haproxy
  group haproxy
  # Enable to access information via socket file 
  # See https://www.haproxy.com/blog/haproxy-apis
  #stats socket /var/run/haproxy.sock mode 0600 level admin expose-fd listeners thread 1

defaults
  mode tcp
  # https://www.haproxy.com/blog/the-four-essential-sections-of-an-haproxy-configuration#timeout-connect-timeout-client-timeout-server
  timeout client  60s
  timeout connect  5s
  timeout server  60s

## Enable a status page at the given port
#frontend stats
#  mode http
#  bind *:8404
#  stats enable
#  stats uri /stats
#  #stats refresh 10s
#  stats admin if LOCALHOST

# Have HAProxy listen for clients on the defined port
frontend frontend
  bind :18081
  default_backend nodes

# Have HAProxy forward connections to this list of nodes
backend nodes
  # Approach the list of nodes least connected to in a roundrobin manner
  balance leastconn
  # https://www.haproxy.com/documentation/haproxy-configuration-tutorials/service-reliability/health-checks/#passive-health-checks
  # https://www.haproxy.com/blog/how-to-enable-health-checks-in-haproxy#passive-health-checks
  #
  # "Passive health checks always coexist with active health checks, with the latter
  # doing its normal polling while also being responsible for reviving a server after
  # it has been marked as down by a passive health check."
  # 
  # Active part:  Nodes will be checked every 10 minutes (inter), considered
  #               "down" if connection fails once (fall 1) and "up" if available
  #               upon the 2 further cheks (rise 2).
  # Passive part: Nodes will be considered "down" if there are at least two
  #               errors in ongoing connections (observe - error-limit 2).
  #               Only an active check (explained above) can return it to "up".
  default-server  check  inter 10m  observe layer4  error-limit 2  on-error mark-down  fall 1  rise 2
  server backend-1 node.moneroworld.com:18089
  server backend-2 uwillrunanodesoon.moneroworld.com:18089
  server backend-3 nodes.hashvault.pro:18081
  server backend-4 node1.xmr-tw.org:18081
  server backend-8 xmr-de-1.boldsuck.org:18081
  # ...

You may append as many nodes as you want, but be aware that each one implies more health checks and slows down HAProxy-startup.

Once HAProxy is running (haproxy -W -f <path-to-config>) you can test the connection with Monero RPC or CLI (monero-wallet-cli --daemon-host <haproxy-ip> --daemon-port 18081 <further-options>).

The configuration surely has room for improvement. If you know any tweaks, please comment in our thread on Monero Town.

Key-Setting Wrench “Umstellaktivator” for LaGard 3330/3390

2022-02-28T00:00:00+00:00

This wrench models a tool required to change the combination on LaGard 3330/3390 locks typically used in safes.

Use this model as reference for crafting your own tool from a steel rod or allen wrench.

IMPORTANT: The torque required when using the tool exceeds the tensile strength of most 3D-printed filaments. Abstain from using a printed version in an actual lock to avoid the risk of the lock becoming unusable.

You can find the source files at https://gitlab.com/fullmetalScience/printables and use OpenSCAD to interpret and convert them to STL or download the necessary STL’s directly from the Key-Setting Wrench ‘Umstellaktivator’ for LaGard 3330/3390 Thingiverse page.

Caliberator 22LR - 3D-printable cartridge-holder for caliber .22 Long Rifle

2020-11-13T00:00:00+00:00

The “Caliberator 22LR” is a box capable of holding up to 50 cartridges in caliber .22 Long Rifle (5.6×15mmR).

A little ramp rises a row of five when the slide is pushed from the opposite side simplifying the act of extracting cartridges.
The box is compatible to the slide that ships with certain CCI-brand ammunition. This may spare you the task of having to print the slide.
On the top of the box above and below the “.22 LR” text there is space for two labels of up to 11 characters (when using an embossing label maker).
Numbering on the side allows for quick calculation of remaining bullets in the box.
Of course the box sports XMR.ID’s bullet mascot on both sides (pointing towards a brighter future :).

Monero fees: Transaction cost versus block size

2020-07-04T00:00:00+00:00

This chart shows how an increase in Moneros block size lowers the transaction costs for every participant of the network.

Note that current block sizes are below 100 kB, so an increase by several factors would still leave you at the leftmost point of the graph.

CORONA-Report - Verifiable Research for Educational Use

2020-04-20T00:00:00+00:00

Corona-Report is an extract from insights gathered about the current global situation.

Important update

This document was last updated in April 2020. A month later, three months into the scare, neither public health records nor scientific studies showed any evidence of a pandemic.

Furthermore, by October 2020 it was understood that not even the existence of a virus had been proven.

Background

Technically, what is being done instead, is using data templates (software) and applying selection bias to a biological sample discarding undesired fragments until the remains are similar, but not equal, to a pre-defined virus model. This newly created data becomes the model of a “new” virus, which is as fictional as the previous one.

In case of tests, real DNA sequences (found or created) are matched against negligibly tiny fractions of said models.

Effectively, all any interested party needs to know is that the illusion of viruses as invisible enemies has become a tool for misguiding people. It’s really other things that make people sick.

Resources

The End of Germ Theory is a broad primer for understanding the issue at hand.
You may look for people listed on The End of COVID (not affiliated). Many of them provide deep insights on their respective web-presences that may help you to master the topic.

Original document

For reference, here are the original documents. The misleading information referencing the effectively disproven concept of pathogenic “viruses” will be removed when time permits:

Corona-Report [English]

Corona-Report [German / Deutsch]

Corona-Report [Spanish / Español]

Click any link above to read or download the current report in your preferred language.

Revision-History:

0.10.0 – Moved Streeck to chapter 2 and added new chapter 3
0.9.6 – [German] Spelling corrections, [English & Spanish] First-time translation – (archived: en, de, es)

Further reading (this website):
fullmetal.science

Article-image courtesy of Lubomir Arsov, from his visionary journey through the fragmented unconscious of the West, In Shadow.

Monero Multisig Run-Through: Zero-to-MMS in an instant

2020-02-22T00:00:00+00:00

Monero multi-signatures are daunting. To show how quickly one can actually get set, I extracted the gist from the corresponding user-guide and crafted what is likely the most concise Monero multisig-guide:

Install and configure PyBitmessage

Imagine the Bitmessage protocol as a common chat room where your Monero clients get together to communicate the required information for each step. We set it up as a daemon that monero-wallet-cli can use.

# Install required applications (example for Arch Linux)
sudo pacman -S python2 openssl git

# Download PyBitmessage
git clone https://github.com/Bitmessage/PyBitmessage.git
cd PyBitmessage

# Check if core dependencies are met.
# You may disregard any warnings about missing Qt.
python2 checkdeps.py

# Install PyBitmessage
python2 setup.py install --user

# Execute PyBitmessage once to generate config files
python2 ~/.local/bin/pybitmessage -h

# Enable daemon mode and disable Dandelion
[ -z $XDG_CONFIG_HOME ] && XDG_CONFIG_HOME="$HOME/.config"
echo 'daemon = true\n[network]\ndandelion = 0' >> ${XDG_CONFIG_HOME}/PyBitmessage/keys.dat

# Execute PyBitmessage
python2 ~/.local/bin/pybitmessage

# Generate your Bitmessage address
python_code='import xmlrpclib, json, time ;
api = xmlrpclib.ServerProxy("http://username:password@localhost:8442/") ;
print api.createRandomAddress("")'
transport_address=`echo ${python_code} | python2`
echo ${transport_address}

Maintaining the aforementioned chat-room analogy your transport address can be thought of your Bitmessage chat handle. In the next step we make the Monero client aware of this handle.

Set up a Multisig-Wallet (Alice’s Monero client)

The following commands have to be run in monero-wallet-cli.

Tell monero-wallet-cli to be less interactive

set ask-password 0
set inactivity-lock-timeout 0

Initialize Multisig

Declare your desired type of multisig and name the additional signers.

mms init 2/2 alice PUT_ALICES_TRANSPORT_ADDRESS_HERE
mms set auto-send 1
mms signer 2 bob
mms start_auto_config

With the last command you’ll be shown a token in the format mmsXXXXXXXX. Hand this token to Bob. He will need it in the following step.

Set up a Multisig-Wallet (Bob’s side)

Just like Alice, Bob needs to set up PyBitmessage (see above) and then generate his Bitmessage address like so:

python_code='import xmlrpclib, json, time ;
api = xmlrpclib.ServerProxy("http://username:password@localhost:8442/") ;
print api.createRandomAddress("")'
echo ${python_code} | python2

Tell Bob’s Monero client to be less interactive

set ask-password 0
set inactivity-lock-timeout 0

Initialize Multisig for Bob

Command the following, inserting the correct Bitmessage address and replacing mmsXXXXXXXX with the token received from Alice.

mms init 2/2 bob   PUT_BOBS_TRANSPORT_ADDRESS_HERE
mms set auto-send 1
mms auto_config mmsXXXXXXXX

Alice: Send necessary signer data to signers via Bitmessage

As soon as you see MMS received new message on Alice’s Monero client, command mms next there, twice:

mms next
mms next

Upon the first invocation the signer config will be sent. The second invocation sends the key set.

Bob: Send necessary data via Bitmessage

As soon as you see MMS received new message on Bob’s Monero client, command mms next there, three times:

mms next
mms next
mms next

The first invocation processes the signer config, the second sends the key set and the third completes the multisig address creation for Bob.

Alice: Send necessary signer data to signers via Bitmessage

Execute mms next once again:

mms next

This completes the multisig address creation for Alice.

Your first multisig transaction

By now the Monero address displayed should have changed to a new one that is the same on Bob’s and Alice’s client.

Once you fund that account by sending some XMR to it you can send money to others.

Use mms transfer RECIPIENT_ADDRESS AMOUNT to initiate the transfer. Then proceed by commanding mms next on either side until the command says that there’s nothing left to do.

Note that Bitmessage message delivery is typically delayed several minutes. When stuck, use mms list to see if a message for a step has yet to arrive.

Sealtag Thor - 3D-printed break-to-access enclosure for Cryptotag

2020-01-19T00:00:00+00:00

Just like our seal for the Billfodl, the “Sealtag Thor” is a tightly-fit enclosure for your metal seed backup.

The seal allows you to tell if someone gained access to its content and potentially compromised your secrets (keys, mnemonic, ssss, …).

Find the free download with detailed print instructions at the Sealtag Thor page on Thingiverse.

Sealfodl - 3D-printed break-to-access enclosure for Billfodl

2019-06-17T00:00:00+00:00

This is a step forward in the safety- & inheritance-concept I am currently developing for Monero.

Admittedly, branding this with it’s own name might be a bit presumptuous, but heck … I enjoy presenting things in a pleasant manner.

The “Sealfodl” is really just a tightly-fit enclosure that draws its value from the possibility of telling if someone has gained access to its content and thus potentially compromised your secrets (keys, mnemonic, ssss, …).

A major part was finding a good and safe way to pause the print job and continue it from where it left off, allowing to hermetically seal the Billfodl in the process.

Link: Sealfodl on Thingiverse