diff --git a/ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml b/ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml new file mode 100644 index 00000000..fd6a2ddd --- /dev/null +++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml @@ -0,0 +1,142 @@ +--- + +services: + ethereum-mainnet-archive: + image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v1.3.12} + sysctls: + # TCP Performance + net.ipv4.tcp_slow_start_after_idle: 0 # Disable slow start after idle + net.ipv4.tcp_no_metrics_save: 1 # Disable metrics cache + net.ipv4.tcp_rmem: 4096 87380 16777216 # Increase TCP read buffers + net.ipv4.tcp_wmem: 4096 87380 16777216 # Increase TCP write buffers + net.core.somaxconn: 32768 # Higher connection queue + # Memory/Connection Management + # net.core.netdev_max_backlog: 50000 # Increase network buffer + net.ipv4.tcp_max_syn_backlog: 30000 # More SYN requests + net.ipv4.tcp_max_tw_buckets: 2000000 # Allow more TIME_WAIT sockets + ulimits: + nofile: 1048576 # Max open files (for RPC/WS connections) + memlock: -1 # Disable memory locking limits (for in-memory DBs like MDBX) + user: root + ports: + - 14563:14563 + - 14563:14563/udp + expose: + - 8545 + - 8551 + entrypoint: [reth, node] + command: + - --chain=mainnet + - --datadir=/root/.local/share/reth + - --discovery.port=14563 + - --max-inbound-peers=50 + - --max-outbound-peers=50 + - --nat=extip:${IP} + - --port=14563 + - --rpc-cache.max-blocks=10000 + - --rpc-cache.max-concurrent-db-requests=2048 + - --rpc.gascap=600000000 + - --rpc.max-blocks-per-filter=0 + - --rpc.max-connections=50000 + - --rpc.max-logs-per-response=0 + - --http + - --http.addr=0.0.0.0 + - --http.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev + - --http.corsdomain=* + - --http.port=8545 + - --ws + - --ws.addr=0.0.0.0 + - --ws.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev + - --ws.origins=* + - --ws.port=8545 + - --authrpc.addr=0.0.0.0 + - --authrpc.jwtsecret=/jwtsecret + restart: unless-stopped + stop_grace_period: 5m + networks: + - chains + volumes: + - ${ETHEREUM_MAINNET_RETH_ARCHIVE_TRACE_DATA:-ethereum-mainnet-reth-archive-trace}:/root/.local/share/reth + - .jwtsecret:/jwtsecret:ro + - /slowdisk:/slowdisk + labels: + - traefik.enable=true + - traefik.http.middlewares.ethereum-mainnet-reth-archive-trace-stripprefix.stripprefix.prefixes=/ethereum-mainnet-archive + - traefik.http.services.ethereum-mainnet-reth-archive-trace.loadbalancer.server.port=8545 + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-archive-trace.entrypoints=websecure} + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-archive-trace.tls.certresolver=myresolver} + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/ethereum-mainnet-archive`) || Path(`/ethereum-mainnet-archive/`))} + - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-reth-archive-trace.rule=Path(`/ethereum-mainnet-archive`) || Path(`/ethereum-mainnet-archive/`)} + - traefik.http.routers.ethereum-mainnet-reth-archive-trace.middlewares=ethereum-mainnet-reth-archive-trace-stripprefix, ipallowlist + + ethereum-mainnet-archive-node: + image: ${ETHEREUM_NIMBUS_IMAGE:-statusim/nimbus-eth2}:${ETHEREUM_MAINNET_NIMBUS_VERSION:-amd64-v25.4.1} + user: root + ports: + - 19563:19563 + - 19563:19563/udp + entrypoint: /bin/sh -c '/home/user/nimbus-eth2/build/nimbus_beacon_node trustedNodeSync --network=mainnet --trusted-node-url=https://mainnet.beaconstate.info --backfill=false; exec /home/user/nimbus-eth2/build/nimbus_beacon_node "$@"' -- + command: + - --history=prune + - --jwt-secret=/jwtsecret + - --nat=extip:${IP} + - --network=mainnet + - --rest + - --rest-host=0.0.0.0 + - --rest-port=3500 + - --tcp-port=19563 + - --udp-port=19563 + - --web3-url=http://ethereum-mainnet-archive:8551 + restart: unless-stopped + depends_on: + - ethereum-mainnet-archive + networks: + - chains + volumes: + - ${ETHEREUM_MAINNET_RETH_ARCHIVE_TRACE__NIMBUS_DATA:-ethereum-mainnet-reth-archive-trace_nimbus}:/root/nimbus-eth2/build/data + - .jwtsecret:/jwtsecret:ro + labels: + - traefik.enable=true + - traefik.http.middlewares.ethereum-mainnet-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/ethereum-mainnet-archive + - traefik.http.services.ethereum-mainnet-reth-archive-trace-node.loadbalancer.server.port=3500 + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-archive-trace-node.entrypoints=websecure} + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-archive-trace-node.tls.certresolver=myresolver} + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ethereum-mainnet-archive/eth`)} + - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-reth-archive-trace-node.rule=PathPrefix(`/ethereum-mainnet-archive/eth`)} + - traefik.http.routers.ethereum-mainnet-reth-archive-trace-node.middlewares=ethereum-mainnet-reth-archive-trace-node-stripprefix, ipallowlist + +volumes: + ethereum-mainnet-reth-archive-trace: + ethereum-mainnet-reth-archive-trace_nimbus: + +x-upstreams: + - id: $${ID} + labels: + provider: $${PROVIDER} + connection: + generic: + rpc: + url: $${RPC_URL} + ws: + frameSize: 20Mb + msgSize: 50Mb + url: $${WS_URL} + chain: ethereum + method-groups: + enabled: + - debug + - filter + - trace + methods: + disabled: + enabled: + - name: txpool_content # TODO: should be disabled for rollup nodes + - id: $${ID}-beacon-chain + chain: eth-beacon-chain + labels: + provider: $${PROVIDER}-beacon-chain + connection: + generic: + rpc: + url: $${RPC_URL} +... \ No newline at end of file diff --git a/ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml b/ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml new file mode 100644 index 00000000..0fab926f --- /dev/null +++ b/ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml @@ -0,0 +1,143 @@ +--- + +services: + ethereum-mainnet: + image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v1.3.12} + sysctls: + # TCP Performance + net.ipv4.tcp_slow_start_after_idle: 0 # Disable slow start after idle + net.ipv4.tcp_no_metrics_save: 1 # Disable metrics cache + net.ipv4.tcp_rmem: 4096 87380 16777216 # Increase TCP read buffers + net.ipv4.tcp_wmem: 4096 87380 16777216 # Increase TCP write buffers + net.core.somaxconn: 32768 # Higher connection queue + # Memory/Connection Management + # net.core.netdev_max_backlog: 50000 # Increase network buffer + net.ipv4.tcp_max_syn_backlog: 30000 # More SYN requests + net.ipv4.tcp_max_tw_buckets: 2000000 # Allow more TIME_WAIT sockets + ulimits: + nofile: 1048576 # Max open files (for RPC/WS connections) + memlock: -1 # Disable memory locking limits (for in-memory DBs like MDBX) + user: root + ports: + - 10150:10150 + - 10150:10150/udp + expose: + - 8545 + - 8551 + entrypoint: [reth, node] + command: + - --chain=mainnet + - --datadir=/root/.local/share/reth + - --discovery.port=10150 + - --full + - --max-inbound-peers=50 + - --max-outbound-peers=50 + - --nat=extip:${IP} + - --port=10150 + - --rpc-cache.max-blocks=10000 + - --rpc-cache.max-concurrent-db-requests=2048 + - --rpc.gascap=600000000 + - --rpc.max-blocks-per-filter=0 + - --rpc.max-connections=50000 + - --rpc.max-logs-per-response=0 + - --http + - --http.addr=0.0.0.0 + - --http.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev + - --http.corsdomain=* + - --http.port=8545 + - --ws + - --ws.addr=0.0.0.0 + - --ws.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev + - --ws.origins=* + - --ws.port=8545 + - --authrpc.addr=0.0.0.0 + - --authrpc.jwtsecret=/jwtsecret + restart: unless-stopped + stop_grace_period: 5m + networks: + - chains + volumes: + - ${ETHEREUM_MAINNET_RETH_PRUNED_TRACE_DATA:-ethereum-mainnet-reth-pruned-trace}:/root/.local/share/reth + - .jwtsecret:/jwtsecret:ro + - /slowdisk:/slowdisk + labels: + - traefik.enable=true + - traefik.http.middlewares.ethereum-mainnet-reth-pruned-trace-stripprefix.stripprefix.prefixes=/ethereum-mainnet + - traefik.http.services.ethereum-mainnet-reth-pruned-trace.loadbalancer.server.port=8545 + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-pruned-trace.entrypoints=websecure} + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-pruned-trace.tls.certresolver=myresolver} + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/ethereum-mainnet`) || Path(`/ethereum-mainnet/`))} + - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-reth-pruned-trace.rule=Path(`/ethereum-mainnet`) || Path(`/ethereum-mainnet/`)} + - traefik.http.routers.ethereum-mainnet-reth-pruned-trace.middlewares=ethereum-mainnet-reth-pruned-trace-stripprefix, ipallowlist + + ethereum-mainnet-node: + image: ${ETHEREUM_NIMBUS_IMAGE:-statusim/nimbus-eth2}:${ETHEREUM_MAINNET_NIMBUS_VERSION:-amd64-v25.4.1} + user: root + ports: + - 15150:15150 + - 15150:15150/udp + entrypoint: /bin/sh -c '/home/user/nimbus-eth2/build/nimbus_beacon_node trustedNodeSync --network=mainnet --trusted-node-url=https://mainnet.beaconstate.info --backfill=false; exec /home/user/nimbus-eth2/build/nimbus_beacon_node "$@"' -- + command: + - --history=prune + - --jwt-secret=/jwtsecret + - --nat=extip:${IP} + - --network=mainnet + - --rest + - --rest-host=0.0.0.0 + - --rest-port=3500 + - --tcp-port=15150 + - --udp-port=15150 + - --web3-url=http://ethereum-mainnet:8551 + restart: unless-stopped + depends_on: + - ethereum-mainnet + networks: + - chains + volumes: + - ${ETHEREUM_MAINNET_RETH_PRUNED_TRACE__NIMBUS_DATA:-ethereum-mainnet-reth-pruned-trace_nimbus}:/root/nimbus-eth2/build/data + - .jwtsecret:/jwtsecret:ro + labels: + - traefik.enable=true + - traefik.http.middlewares.ethereum-mainnet-reth-pruned-trace-node-stripprefix.stripprefix.prefixes=/ethereum-mainnet + - traefik.http.services.ethereum-mainnet-reth-pruned-trace-node.loadbalancer.server.port=3500 + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-pruned-trace-node.entrypoints=websecure} + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-pruned-trace-node.tls.certresolver=myresolver} + - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-pruned-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ethereum-mainnet/eth`)} + - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-reth-pruned-trace-node.rule=PathPrefix(`/ethereum-mainnet/eth`)} + - traefik.http.routers.ethereum-mainnet-reth-pruned-trace-node.middlewares=ethereum-mainnet-reth-pruned-trace-node-stripprefix, ipallowlist + +volumes: + ethereum-mainnet-reth-pruned-trace: + ethereum-mainnet-reth-pruned-trace_nimbus: + +x-upstreams: + - id: $${ID} + labels: + provider: $${PROVIDER} + connection: + generic: + rpc: + url: $${RPC_URL} + ws: + frameSize: 20Mb + msgSize: 50Mb + url: $${WS_URL} + chain: ethereum + method-groups: + enabled: + - debug + - filter + - trace + methods: + disabled: + enabled: + - name: txpool_content # TODO: should be disabled for rollup nodes + - id: $${ID}-beacon-chain + chain: eth-beacon-chain + labels: + provider: $${PROVIDER}-beacon-chain + connection: + generic: + rpc: + url: $${RPC_URL} +... \ No newline at end of file