Running a Full Node
Overview
This guide covers the steps required to run a full node on Aztec using Docker Compose.
A full node allows you to connect and interact with the network, providing an interface to send and receive transactions and state updates without relying on third parties.
You should run your own full node if you want to interact with the network in the most privacy-preserving way. It's also a great way to support the Aztec network and get involved with the community.
Minimum Hardware Requirements
- 8 core / 16 vCPU (released in 2015 or later)
- 16 GB RAM
- 1 TB NVMe SSD
- 25 Mbps network connection
These requirements are subject to change as the network throughput increases.
Before proceeding: Ensure you've reviewed and completed the prerequisites.
This setup includes only essential settings. The --network mainnet flag applies network-specific defaults—see the CLI reference for all available configuration options.
Setup
Step 1: Set Up Directory Structure
Create the directory structure for node data:
mkdir -p aztec-node/data
cd aztec-node
touch .env
Step 2: Configure Environment Variables
Add the following to your .env file:
DATA_DIRECTORY=./data
LOG_LEVEL=info
ETHEREUM_HOSTS=[your L1 execution endpoint]
L1_CONSENSUS_HOST_URLS=[your L1 consensus endpoint]
ETHEREUM_DEBUG_HOSTS=[your trace capable L1 execution endpoint]
P2P_IP=[your external IP address]
P2P_PORT=40400
AZTEC_PORT=8080
AZTEC_ADMIN_PORT=8880
Find your public IP address with: curl ipv4.icanhazip.com
The node needs an L1 execution endpoint that serves trace_transaction or debug_traceTransaction. A checkpoint published through a non-standard contract, rather than by a direct call to the rollup, cannot be read from the transaction calldata alone. The node traces that transaction to recover the checkpoint, and without a trace it stops syncing at that checkpoint.
Set ETHEREUM_DEBUG_HOSTS to your trace-capable endpoint. If you leave it unset, the node uses ETHEREUM_HOSTS for trace calls. The node only uses ETHEREUM_DEBUG_HOSTS for traces, not for regular L1 interactions.
At startup the node checks that it can trace a recent L1 transaction on that endpoint, and refuses to start if neither method works. To start anyway, set ETHEREUM_ALLOW_NO_DEBUG_HOSTS=true. The node then logs a warning and runs, but stalls on the first checkpoint it cannot read until you point it at a trace-capable endpoint and restart it.
Step 3: Create Docker Compose File
Create a docker-compose.yml file in your aztec-node directory:
services:
aztec-node:
image: "azteclabs/aztec:6.0.0"
container_name: "aztec-node"
ports:
- ${AZTEC_PORT}:${AZTEC_PORT}
- ${P2P_PORT}:${P2P_PORT}
- ${P2P_PORT}:${P2P_PORT}/udp
volumes:
- ${DATA_DIRECTORY}:/var/lib/data
environment:
DATA_DIRECTORY: /var/lib/data
LOG_LEVEL: ${LOG_LEVEL}
ETHEREUM_HOSTS: ${ETHEREUM_HOSTS}
L1_CONSENSUS_HOST_URLS: ${L1_CONSENSUS_HOST_URLS}
ETHEREUM_DEBUG_HOSTS: ${ETHEREUM_DEBUG_HOSTS}
P2P_IP: ${P2P_IP}
P2P_PORT: ${P2P_PORT}
AZTEC_PORT: ${AZTEC_PORT}
AZTEC_ADMIN_PORT: ${AZTEC_ADMIN_PORT}
entrypoint: >-
node
--no-warnings
/usr/src/yarn-project/aztec/dest/bin/index.js
start
--node
--network mainnet
networks:
- aztec
restart: always
networks:
aztec:
name: aztec
The admin port (8880) is intentionally not exposed to the host machine for security reasons. The admin API provides sensitive operations like configuration changes and database rollbacks that should never be accessible from outside the container.
If you need to access admin endpoints, use docker exec:
docker exec -it aztec-node curl -X POST http://localhost:8880 \
-H 'Content-Type: application/json' \
-d '{"jsonrpc":"2.0","method":"aztecAdmin_getConfig","params":[],"id":1}'
Step 4: Start the Node
Start the node:
docker compose up -d
Verification
Once your node is running, verify it's working correctly:
Check Node Sync Status
Check the current sync status:
curl -s -X POST -H 'Content-Type: application/json' \
-d '{"jsonrpc":"2.0","method":"aztec_getChainTips","params":[],"id":67}' \
http://localhost:8080 | jq -r ".result.proven.number"
Compare the output with block explorers (see Networks page for explorer links).
Check Node Status
curl http://localhost:8080/status
Verify Port Connectivity
# Check TCP connectivity on port 40400
nc -vz [YOUR_EXTERNAL_IP] 40400
# Should return: "Connection to [YOUR_EXTERNAL_IP] 40400 port [tcp/*] succeeded!"
# Check UDP connectivity on port 40400
nc -vu [YOUR_EXTERNAL_IP] 40400
# Should return: "Connection to [YOUR_EXTERNAL_IP] 40400 port [udp/*] succeeded!"
View Logs
docker compose logs -f aztec-node
If all checks pass, your node should be up, running, and connected to the network.
Troubleshooting
Port forwarding not working
Issue: Your node cannot connect to peers.
Solutions:
- Verify your external IP address matches the
P2P_IPsetting - Check firewall rules on your router and local machine
- Test connectivity using:
nc -zv [your-ip] 40400
Node not syncing
Issue: Your node is not synchronizing with the network.
Solutions:
- Check L1 endpoint connectivity
- Verify both execution and consensus clients are fully synced
- Review logs for specific error messages
- Ensure L1 endpoints support high throughput
Docker issues
Issue: Container won't start or crashes.
Solutions:
- Ensure Docker and Docker Compose are up to date
- Check disk space availability
- Verify the
.envfile is properly formatted - Review container logs:
docker compose logs aztec-node
Next Steps
- Review syncing best practices for faster synchronization
- Learn about bootnode operation for peer discovery
- Check the CLI reference for advanced configuration options
- Join the Aztec Discord for support and community discussions