Best settings for airgap mode

[takuma sato]

If you want to launch bitcoin-qt with zero network activity, what are the best settings to add? I have added all I could find (-connect=0 -listen=0 -dnsseed=0 -listenonion=0 -maxconnections=0 -upnp=0 -proxy=0)

Yet when I launch bitcoin-qt and run getnetworkinfo on the console it says

"networkactive": true,

Also in the different types of connections are enabled for ipv4, ipv6 are set as true in reachable. So why are those set as true if I added all these command lines? The commands that you set to launch bitcoin-qt supposedly supercede any settings on bitcoin.conf but I have that file empty anyway so I don't get it. The network activity icon is not greyed out when I launch it and it gives the option to "Disable network activity". How do I launch it with network activity disabled? I do not want the software to constantly try to connect if I don't want to run internet there anyway.

[BitMaxz]

For non-syncing from your config above, connect, listen, and maxconnection should be enough to make your core not sync online.

But since this is an air gap, why not completely disable the wifi and disconnect it forever from the internet? You don't need to configure it unless you still want the device to be connected online.
An air gap device should be completely disconnected from any network. If you are planning to connect it in the future, then. That's not an air gap device.

[achow101]

-networkactive=0, but -connect=0 should be sufficient to not have any p2p network activity.

[takuma sato]

For non-syncing from your config above, connect, listen, and maxconnection should be enough to make your core not sync online.

But since this is an air gap, why not completely disable the wifi and disconnect it forever from the internet? You don't need to configure it unless you still want the device to be connected online.
An air gap device should be completely disconnected from any network. If you are planning to connect it in the future, then. That's not an air gap device.

Yes, everything is turned off, no wifi card or ethernet, I just want to disable the network activity so the node stops trying to download blocks.

-networkactive=0, but -connect=0 should be sufficient to not have any p2p network activity.

Yeah, this did it, now the icon shows it's not enabled and getnetworkinfo says false on "networkactive". What I was hopping is that it could stop trying to look for peers, but on the lower left it still says "Connecting to peers...". Does this stay in this permanent state of trying to ping for peers? I feel like there may be resources being wasted with the software trying to do something all the time, looking for an internet connection. Maybe there should be an -airgap mode or something, designed for people that use an airgap setup with 2 computers, like a way to automatically tell the software to stop anything under the radar that may be trying to still do something but it can't due lack of internet connection, such as for instance this message of "Connecting to peers..." that I assume it means it's trying to connect to peers. Maybe this airgap mode could actually refuse to start the software if it detects an internet connection, in case you do something stupid like accidentally connecting an ethernet cable into the wrong laptop, something dumb like that you may accidentally do, you never know, so that's just another layer of protection at the software level.

[achow101]

but on the lower left it still says "Connecting to peers...". Does this stay in this permanent state of trying to ping for peers?

No, that's just the default text of the initial state. Since it never leaves that initial state, it does not change, but it's not actually attempting any connections.

Maybe there should be an -airgap mode or something, designed for people that use an airgap setup with 2 computers, like a way to automatically tell the software to stop anything under the radar that may be trying to still do something but it can't due lack of internet connection,

That's literally what -networkactive does.

[apogio]

From your conversation, since I am also interested, can I assume that -networkactive=0 can be the only parameter that I need to set in order to get an airgapped Bitcoin Core instance? There are many parameteres suggested, or discussed, but I don't want to add redundant parameters in my config (if I am not 100% sure what they do).

[takuma sato]

From your conversation, since I am also interested, can I assume that -networkactive=0 can be the only parameter that I need to set in order to get an airgapped Bitcoin Core instance? There are many parameteres suggested, or discussed, but I don't want to add redundant parameters in my config (if I am not 100% sure what they do).

Im guessing that one does it. I added the usual ones (connect=0, listen=0, maxconnections=0... etc) just for good measure but probably redundant.

[nc50lc]

-snip- can I assume that -networkactive=0 can be the only parameter that I need to set in order to get an airgapped Bitcoin Core instance? There are many parameteres suggested, or discussed, but I don't want to add redundant parameters in my config (if I am not 100% sure what they do).

Not only unnecessary, some of those configs also have interactions with one another.
Like if either -connect or -maxconnections are set to "0" like in his config, -listen and -dnsseed will also be set to "0".
Test setting only -connect=0, then open your logs and look for "parameter interaction" to check which of those options are unnecessary.

Another is: upnp=0 is not available in Core v29.0+ because it's dropped in that version; in Bitcoin Knots/Core, it's also unnecessary since it's already set to "0" by default.

Im guessing that one does it. I added the usual ones (connect=0, listen=0, maxconnections=0... etc) just for good measure but probably redundant.

I thought you're "future-proofing" your bitcoin.conf file with all those disabled network-related config in case something change in the future.

[apogio]

So reading @nc50lc's post I realize that some attributes have significant correlation, meaning that changing the one will also change the other.

And I can't help but wonder, perhaps being too naive, but can't I simply run Core on an airgapped computer and have the default config, without even spending a second changing it?

[nc50lc]

And I can't help but wonder, perhaps being too naive, but can't I simply run Core on an airgapped computer and have the default config, without even spending a second changing it?

Yes, the default should be enough as long as the machine is actually setup Air-Gap because it wont be able to establish a connection to anything.

I think takuma sato's main goal was in this reply where he's looking for a way to remove the "connecting to peers" message while Core is offline:

What I was hopping is that it could stop trying to look for peers, but on the lower left it still says "Connecting to peers...". Does this stay in this permanent state of trying to ping for peers?

[apogio]

Yes, the default should be enough as long as the machine is actually setup Air-Gap because it wont be able to establish a connection to anything.

I think takuma sato's main goal was in this reply where he's looking for a way to remove the "connecting to peers" message while Core is offline:

What I was hopping is that it could stop trying to look for peers, but on the lower left it still says "Connecting to peers...". Does this stay in this permanent state of trying to ping for peers?

Got it, I actually have a fully offline computer that I use to generate wallets (not that I generate many, but when I do I need it to be offline). This computer has never been connected to the internet and it has no WiFi adapter, nor Bluetooth adapter. I guess, without any software modification in Bitcoin Core, my goal to be completely offline is accomplished.

As far as the "info" message for peer connections is concerned, yeah it can be annoying, but not anything that bothers me too much so that I need it gone desperately. In fact, many software wallets have this kind of info messages; Sparrow has a "connecting to server" message and I think Electrum has one as well. It's normal because they are primarily meant to be used online and connected with nodes.