> For the complete documentation index, see [llms.txt](https://docs.zetrix.com/zetrix-l2-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.zetrix.com/zetrix-l2-documentation/network-and-deployment/networking.md).

# Networking

## AWS Network Load Balancer

The public **RPC endpoint** is fronted by an **AWS Network Load Balancer (NLB)**:

* Layer-4 (TCP) load balancing across healthy Z2 Nodes.
* Health checks remove unhealthy nodes from rotation.
* High throughput, low latency, static IPs / DNS integration.

```mermaid
flowchart LR
    C([Clients / Wallets]) --> DNS[DNS: z2-node.zetrix.com]
    DNS --> NLB[AWS Network Load Balancer]
    NLB --> N1[Node 1]
    NLB --> N2[Node 2]
    NLB --> N3[Node 3]
    NLB --> N4[Node 4]
    NLB --> N5[Node 5]
```

## RPC Endpoint

* Single logical endpoint (`z2-node.zetrix.com`) → many backend nodes.
* Exposes JSON-RPC (HTTPS) and WebSocket (WSS).
* Admin/debug namespaces are **not** exposed on the public endpoint.

## DNS

### Testnet DNS

| Domain                         | Target                                | Purpose                                        |
| ------------------------------ | ------------------------------------- | ---------------------------------------------- |
| `z2-test-node.zetrix.com`      | Node host `124.243.176.118` (via NLB) | Public JSON-RPC/WS                             |
| `z2-test-validator.zetrix.com` | Main Proposer Validator               | Proposer/Watcher dashboard (`/dashboard.html`) |
| `z2-test-explorer.zetrix.com`  | Explorer                              | Block explorer                                 |
| `z2-test-admin.zetrix.com`     | → same IP as node (`124.243.176.118`) | Monitoring dashboard                           |
| `z2-test-faucet.zetrix.com`    | → same IP as node (`124.243.176.118`) | Faucet                                         |

### Production DNS (proposed)

| Domain                    | Target                                | Purpose                                     |
| ------------------------- | ------------------------------------- | ------------------------------------------- |
| `z2-node.zetrix.com`      | AWS NLB → all Node server IPs         | Public JSON-RPC/WS                          |
| `z2-validator.zetrix.com` | Server 6 (Main Proposer + Reexecutor) | Proposer/Watcher dashboard                  |
| `z2-explorer.zetrix.com`  | Server 7 (Explorer)                   | Block explorer                              |
| `z2-admin.zetrix.com`     | Server 8 (Monitoring)                 | Operator/monitoring dashboards (restricted) |
| `z2-faucet.zetrix.com`    | Server 8 (Faucet)                     | Gas faucet                                  |

## SSL / TLS

* TLS termination for HTTPS/WSS (ACM certificates on the load balancer or reverse proxy).
* Enforce TLS 1.2+; automatic certificate renewal.
* HSTS on web dashboards.

## Suggested Domains

Production sub-domains (drop the `-test` segment used on Testnet):

* `z2-node.zetrix.com` — Node RPC (behind AWS NLB)
* `z2-validator.zetrix.com` — Main Proposer Validator dashboard
* `z2-explorer.zetrix.com` — Explorer
* `z2-admin.zetrix.com` — Monitoring / admin dashboards
* `z2-faucet.zetrix.com` — Faucet

> \[!WARNING] `z2-validator.zetrix.com` and `z2-admin.zetrix.com` expose operator functions and dashboards. Place them behind authentication, IP allowlists, and/or VPN — never open to the public internet.

***

[← Production Deployment Recommendation](/zetrix-l2-documentation/network-and-deployment/production-deployment.md) · [Index](/zetrix-l2-documentation/readme.md) · [Wallet Configuration →](/zetrix-l2-documentation/usage/wallet-configuration.md)