Documentation
Docs22. Overview
22. Overview
22.1 HTTP & WebSocket Ports
- HTTP JSON-RPC: Port
8545 - WebSocket (WSS): Port
8546
22.2 Loopback-Only Binding
By design, the Kortana daemon (kortanad) binds these ports to 127.0.0.1 (loopback) only. There is no configuration key to bind directly to a public IP. Exposing the RPC to the public internet requires a reverse proxy (such as nginx).
22.3 Authentication & Access Control
Standard methods are unauthenticated. However, administrative methods (such as ktn_shutdown) require a secure bearer token configured at the proxy layer to prevent unauthorized access.
22.4 Rate Limiting
The node natively protects itself against spam by enforcing body caps and connection timeouts. Public deployments utilize the edge proxy to enforce strict rate limits (e.g., 5 requests per second per IP) before the JSON payload is parsed.