3

Let's say that I were to pass --rpc-bind-ip 0.0.0.0 to monerod, and also --restricted-rpc (along with the external bind confirmation), what would the outcome be? What does the second command do when interacting with the first? What happens when we add rpc-login specifications into the mix?

I'd love to understand how the different combinations of these parameters interact. What's going on under the hood?

  • --rpc-bind-ip 0.0.0.0
  • --restricted-rpc
  • --rpc-login user:pw
  • --rpc-bind-ip 0.0.0.0 --restricted-rpc
  • --restricted-rpc --rpc-login user:pw
  • --rpc-bind-ip 0.0.0.0 --rpc-login user:pw
  • --rpc-bind-ip 0.0.0.0 --restricted-rpc --rpc-login user:pw
Improve this question

1 Answer 1

Reset to default
1

--restricted-rpc, answered here and detailed in the --help:

Restrict RPC to view only commands and do not return privacy sensitive data in RPC calls

You'd probably want to use this if you plan on making your daemon publicly accessible.

--rpc-bind-ip 0.0.0.0, means that the daemon will bind (listen) on all the IP addresses on all interfaces.

--rpc-login user:pw, means that a username "user" and password "pw" is required to access the RPC interface. You'd probably want to use this if you plan on making your daemon publicly accessible.

All these options are documented in the help output (monerod --help), and you can use any mixture/combination of them (or none at all).

Improve this answer
4
  • If I put "restricted-rpc=true" in my config file, do I still have to put "rpc-restricted-bind-ip" directive in there? Or does the former automatically turn the "rpc-bind-ip" directive in a "restricted" one?
    – xmrkrabs
    Jun 17 at 11:48
  • "If I put "restricted-rpc=true" in my config file, do I still have to put "rpc-restricted-bind-ip" directive in there?" <- No. "Or does the former automatically turn the "rpc-bind-ip" directive in a "restricted" one?" <- Yes.
    – jtgrassie ♦
    Jun 17 at 15:09
  • @jtgrassie, do you have the ability to link to where in the code the if/else clauses for the command line arguments are parsed?
    – Bryan
    Jun 17 at 17:09
  • github.com/monero-project/monero/blob/… and github.com/monero-project/monero/blob/…
    – jtgrassie ♦
    Jun 17 at 21:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.