Tag: Lightning Network
All the articles with the tag "Lightning Network".
Selecting more than one tag in the sidebar shows only posts that have every selected tag.
- #Lightning Network#lnd#Aperture
Aperture #286: L402 Metrics Before and After
Adding per-outcome Prometheus counters to Lightning Labs' Aperture proxy for L402 minting and verification, and what changes for an operator watching the /metrics endpoint.
Updated:18 min read - #Contribution#lnd#Lightning Network
LND: Short Reads in NodeAnnouncement2 Address Decoders, Fixed
I reported that LND's NodeAnnouncement2 address decoders accepted truncated records by ignoring how many bytes Read returned. A maintainer confirmed it, found a second bug in the same parser, and fixed both in lnd#11219 with me as a co-author.
4 min read - #Security Requirements Plugin#Security Requirements#Security Design
Deriving Security Requirements for a Lightning-Paid Scan Service
Running my security-requirements plugin on the OpenCTI paid scan service: a confirmed profile, a FIPS 199 impact, eleven service-specific threats, a confirmed risk batch, and nineteen verifiable requirements, three of which no baseline control would have produced.
7 min read - #Lightning Network#lnd#Prometheus
An Always-On Testnet4 LND Node (2) - Moving the Monitoring to Testnet4
Pointing the lndmon, Prometheus, and Grafana stack from the regtest lab at the always-on testnet4 node: a new lndmon service, a relabeled scrape job, and lndmon's own seven Grafana dashboards, adjusted and provisioned read-only.
11 min read - #Lightning Network#lnd#Bitcoin
An Always-On Testnet4 LND Node (1) - bitcoind and LND on Testnet4
Moving the systemd-managed LND lab from regtest to Bitcoin's testnet4 as a node that stays up: a separate pruned bitcoind and a separate LND, each with its own account, directories, ports, and rpcauth login, and LND's first look at a backend still syncing.
17 min read - #Lightning Network#lnd#Prometheus
Monitoring LND with systemd, Without Containers (3) - Dashboards with Grafana
Binding Grafana to loopback, checking its health, connecting it to Prometheus, and building the first dashboard panels for the two regtest LND nodes: channel balance, scrape status, peers, and active channels.
11 min read - #Lightning Network#lnd#Prometheus
Monitoring LND with systemd, Without Containers (2) - Scraping lndmon with Prometheus
Installing Prometheus from Ubuntu's archive, reading the unit and hardening the package ships, binding it to loopback, replacing the sample config with scrape jobs for both lndmon exporters, and checking every target is up.
8 min read - #Lightning Network#lnd#Prometheus
Monitoring LND with systemd, Without Containers (1) - Exporting LND Metrics with lndmon
Building lndmon from source, connecting it to two regtest LND nodes over TLS with read-only macaroons, and running one exporter per node under systemd, the first step toward a monitored baseline.
12 min read - #Lightning Network#lnd#Bitcoin
Running LND with systemd, Without Containers (7) - Opening a Channel and Sending a Payment
Opening a regtest channel from the funded node to its peer, following the funding transaction through the mempool into a block, and sending a 10,000-sat Lightning payment across it.
10 min read - #Lightning Network#lnd#Bitcoin
Running LND with systemd, Without Containers (6) - Configuring LND and Running It as a Service
Writing lnd.conf against the regtest bitcoind, running LND under systemd, creating its wallet, proving the RPC and ZMQ paths, funding it with 1 BTC, and connecting a second node as a peer.
19 min read - #Lightning Network#lnd#Bitcoin
Running LND with systemd, Without Containers (5) - Preparing bitcoind for LND: rpcauth and ZMQ
Giving LND its own RPC login to bitcoind with rpcauth, comparing it with cookie auth, proving the login works as the lnd user, and adding the ZMQ block and transaction feeds LND needs.
9 min read - #Lightning Network#lnd#Linux
Running LND with systemd, Without Containers (4) - Installing LND and Its Service Account
Downloading LND v0.21.3-beta for ARM64, verifying the release manifest against a maintainer's signing key and the tarball against the manifest, installing it next to bitcoind, and giving it its own service user and directories.
4 min read - #Lightning Network#lnd#Bitcoin
Running LND with systemd, Without Containers (3) - Running bitcoind as a systemd Service
A hardened systemd unit for bitcoind, checked step by step: verify, start, status, RPC, a regtest miner wallet with 101 blocks, a restart that keeps the chain and wallet, and enabling it at boot.
11 min read - #Lightning Network#lnd#Bitcoin
Running LND with systemd, Without Containers (2) - Installing and Configuring Bitcoin Core
Picking the Bitcoin Core version LND is tested against, verifying the download by checksum and builder signatures, installing it, and giving bitcoind its own service user, directories, and locked-down configuration.
11 min read - #Lightning Network#lnd#Linux
Running LND with systemd, Without Containers (1) - The Lab Environment
A home lab that runs LND and an Ethereum Hoodi node directly in a Lima VM on a Mac, without Docker or Kubernetes, to learn what those tools were doing for me. Part 1 covers the host, VM, guest kernel, and service manager, and checks that the VM starts clean.
6 min read - #AI#Kagent#SRE
Diagnosing OpenCTI with Kagent (6) - Drill 2: Invoice Failure After the SRE Upgrades
A blind rehearsal drill against the upgraded L402 monitoring. The pages fired in 2 minutes 21 seconds and the agent found the broken component, but it skipped a required tool and invented details. A blameless review of what happened.
12 min read - #Lightning Network#lnd#Routing
Relaying a Test Payment Through a Testnet LND Node
Using two testnet LND nodes on a Mac and in WSL, a 10-sat self-payment is routed through the WSL node, after finding and fixing a disabled channel policy, and checked against the node's forwarding history.
15 min read - #Lightning Network#lnd#Routing
Checking Routing Readiness on a Testnet LND Node
Before changing any fee policy, a read-only check of a testnet LND node on Kubernetes in WSL covering pod state, chain and graph sync, channel liquidity by direction, SCIDs, and per-channel fee and HTLC policies.
8 min read - #AI#Kubernetes#Aperture
Diagnosing OpenCTI with Kagent (4) - Rehearsing Incidents with an LLM Agent
I rehearsed incidents against a Kagent on-call agent watching an Aperture L402 payment gate, then scored it against a playbook. The exercise found gaps in my own alerts too.
8 min read - #Lightning Network#lnd#L402
Lightning Payments for OpenCTI (3) - From Lightning Payment to a Paid Scan Order
How a paid Lightning invoice becomes a paid scan order, from the preimage and L402 proof to merchant settlement checks, durable receipt processing, and safe retries.
6 min read - #Lightning Network#lnd#L402
Lightning Payments for OpenCTI (2) - From a Scan Order to a Lightning Invoice
How our OpenCTI and ASM service turns a scan order into a Lightning invoice, from the server-side quote to Aperture's dynamic price lookup and the L402 challenge.
4 min read - #Lightning Network#lnd#L402
Lightning Payments for OpenCTI (1) - Aperture as a Payment Gate
How Aperture's L402 payment gate works, from a simple paid API to our OpenCTI and ASM service with order-based pricing and receipt verification, and where Aperture's job ends.
5 min read - #Kagent#LND on Kubernetes#Prometheus
Metrics Collector: Prometheus on LND
Before an incident-response drill, the node needs metrics. How lndmon turns LND's state into Prometheus metrics, and how to read the /metrics format by hand.
3 min read - #LND on Kubernetes#Lightning Network#Kubernetes
Running an LND Lightning Node on Local Kubernetes: Designing for State, Identity, and Recovery
A Lightning node is state, not just a process. How I mapped LND's wallet, channel, and recovery model onto StatefulSets, PVCs, NetworkPolicy, and tests on local K3s.
13 min read - #Lightning Network#lnd#Aperture
Introduction to Lightning Node Operations
Payment channels, HTLCs, directional liquidity, and where LND and Aperture fit, as the groundwork for operating a Lightning node.
8 min read - #Lightning Network#lnd#Aperture
Aperture L402 Security Event Monitoring Proposal
A proposal to replace Aperture's DEBUG-only L402 logs with structured, HMAC-referenced security events, with real before/after captures for each failure type.
6 min read