# Valid validator set without DDoS

**URL:** <https://forum.cosmos.network/t/valid-validator-set-without-ddos/691>\
**Category:** Validation\
**Created:** [August 6, 2018, 6:24am UTC](https://forum.cosmos.network/t/valid-validator-set-without-ddos/691 "2018-08-06T06:24:41Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![vaibhavchellani](https://avatars.discourse-cdn.com/v4/letter/v/ecc23a/32.png) [@vaibhavchellani](https://forum.cosmos.network/u/vaibhavchellani)\
**Post date:** [August 6, 2018, 6:24am UTC](https://forum.cosmos.network/t/valid-validator-set-without-ddos/691/1 "2018-08-06T06:24:41Z")

</div>

How does Tendermint maintain a persistent public key record of nodes without exposing them to DDoS attacks?

---

<div class="post-metadata">

**Author:** ![jack](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/jack/32/98_2.png) [@jack](https://forum.cosmos.network/u/jack)\
**Post date:** [August 6, 2018, 6:55pm UTC](https://forum.cosmos.network/t/valid-validator-set-without-ddos/691/2 "2018-08-06T18:55:36Z")

</div>

I think this post on Sentry Node architecture might help: [Sentry Node Architecture Overview](https://forum.cosmos.network/t/sentry-node-architecture-overview/454)

---

<div class="post-metadata">

**Author:** ![vaibhavchellani](https://avatars.discourse-cdn.com/v4/letter/v/ecc23a/32.png) [@vaibhavchellani](https://forum.cosmos.network/u/vaibhavchellani)\
**Post date:** [August 7, 2018, 7:18am UTC](https://forum.cosmos.network/t/valid-validator-set-without-ddos/691/3 "2018-08-07T07:18:23Z")

</div>

Sentry nodes increase reliability on centralised cloud service providers , can you think of an more decentralised alternative ?

---

<div class="post-metadata">

**Author:** ![mdyring](https://avatars.discourse-cdn.com/v4/letter/m/b5e925/32.png) [@mdyring](https://forum.cosmos.network/u/mdyring)\
**Post date:** [August 7, 2018, 9:16am UTC](https://forum.cosmos.network/t/valid-validator-set-without-ddos/691/4 "2018-08-07T09:16:28Z")

</div>

There is no “public key record” of full nodes. They can join and leave freely via the p2p layer.

I am guessing that by “public key record” you refer to the validator set managed by the cosmos-sdk. This does not contain any information (such as IP address) usable for DDoS attacks and is thus decoupled from the network layer.

Regarding sentries and cloud service providers, it is entirely possible to set up sentry nodes in a colocated environment as well.

---

<div class="post-metadata">

**Author:** ![vaibhavchellani](https://avatars.discourse-cdn.com/v4/letter/v/ecc23a/32.png) [@vaibhavchellani](https://forum.cosmos.network/u/vaibhavchellani)\
**Post date:** [August 7, 2018, 9:27am UTC](https://forum.cosmos.network/t/valid-validator-set-without-ddos/691/5 "2018-08-07T09:27:39Z")

</div>

Yes makes sense , thank you 🙂