Nodeist

Firewall – We reject all incoming traffic except a few important ports like 26656.
Hardware, we connected SSH Key Authentication to login to server (.pem). No one can log in without these keys.
We have removed the default SSH port 22 and are using another port for SSH.
We removed SSH login using root password (root-pass).
IP Lock – SSH login is only allowed from 1 main IP and temporary access to another IP is allowed during travel.
We run dedicated powerful servers for all our nodes with NVMe SSD. A few settings have been specially updated for the best performance on the server. We regularly check and update for new updates for the operating system.
Fully synchronized Backup server and if main server is down, we can switch to backup server in 5 minutes.