Add info about running Prometheus on a separate host. (#291)

* Add CLI option to disable built-in slashing protection for external signers. Signed-off-by: Byron Gravenorst <[email protected]> * Add instructions to connect to mainnet. Signed-off-by: Byron Gravenorst <[email protected]> * updating submodule to latest * Add instructions to connect to mainnet. Signed-off-by: Byron Gravenorst <[email protected]> * Fix markdown issue. Signed-off-by: Byron Gravenorst <[email protected]> * Add info about running Prometheus on a separate host. Signed-off-by: bgravenorst <[email protected]> * Address reviewer feedback. Signed-off-by: bgravenorst <[email protected]>
Consensys · Jun 1, 2021 · 236c8ad · 236c8ad
1 parent 7aae7db
commit 236c8ad
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/docs/HowTo/Monitor/Metrics.md b/docs/HowTo/Monitor/Metrics.md
@@ -53,6 +53,15 @@ To configure Prometheus and run with Teku:
      --metrics-enabled=true --metrics-categories=BEACON,PROCESS,LIBP2P,JVM,NETWORK,PROCESS
      ```
 
+    !!! important
+
+        To avoid DNS rebinding attacks, if running Prometheus on a different host to your Teku node
+        (any host other than `localhost`), ensure you add the hostname that Prometheus uses to
+        connect to Teku to [`--metrics-host-allowlist`](../../Reference/CLI/CLI-Syntax.md#metrics-host-allowlist).
+
+        For example, if Prometheus is configured to get metrics from `http://teku.local:8008/metrics`
+        then `teku.local` has to be in `--metrics-host-allowlist`.
+
      To specify the host and port on which Prometheus accesses Teku, use the
      [`--metrics-interface`](../../Reference/CLI/CLI-Syntax.md#metrics-interface) and
      [`--metrics-port`](../../Reference/CLI/CLI-Syntax.md#metrics-port) options. The default host