This guide explains Bitcoin Core whitelist permissions in plain English. It focuses on what the subject is, why it matters and what a beginner should remember.
TL;DR
- What it is: Bitcoin Core 0.20 allowed whitelist and whitebind entries to carry explicit peer permissions. The historical set included bloomfilter, noban, forcerelay, relay and mempool; forcerelay implied relay, while entries without an explicit permission prefix received implicit defaults.
- Why it matters: Peer whitelisting deliberately relaxes Bitcoin Core safeguards. Safe operation grants explicit individual permissions to the smallest reliable address scope and verifies the effective connection after every restart.
- Current position: Require a second reviewer and explicit rollback or expiry, and pause payments, signing or network-dependent services until post-change evidence is complete.
Bitcoin Core whitelist permissions in simple English
Bitcoin Core whitelist permissions: whitelist applies permissions to peers from an IP address or CIDR network. Whitebind listens on an address and port and grants permissions to peers connecting there.
Simple example
A node operator is checking Bitcoin Core whitelist permissions. Use comma-separated permissions before an at sign and the address. It does not make messages valid and can increase resource exposure if granted to an attacker or broad subnet.
Key terms in plain English
- BIP:
- Bitcoin Improvement Proposal: a document describing a proposed rule, standard or process. Its status must be checked separately.
- Bitcoin Core:
- Widely used software that validates Bitcoin and can provide wallet, network and operator tools.
- Mempool:
- A node’s changing local collection of valid, unconfirmed transactions.
- Node:
- A computer running Bitcoin software that checks data and communicates with other peers.
Whitelist versus whitebind
whitelist applies permissions to peers from an IP address or CIDR network. Whitebind listens on an address and port and grants permissions to peers connecting there. Neither authenticates an organisation by name.
Explicit permission prefix
Use comma-separated permissions before an at sign and the address. Omitting the prefix invokes version-specific implicit defaults, so explicit minimal sets are safer and easier to audit.
noban risk
noban exempts a peer from automatic banning for misbehaviour in this version. It does not make messages valid and can increase resource exposure if granted to an attacker or broad subnet.
Relay permissions
relay permits transaction relay even in blocksonly mode; forcerelay can relay transactions already known to the mempool and implies relay. Grant only where that behaviour is operationally necessary.
Data permissions
mempool permits BIP 35 mempool requests and bloomfilter permits BIP 37 filtering. Both can expose data or consume resources and should not be default trust badges.
Address scope
Use the narrowest valid host or subnet and a dedicated whitebind interface where appropriate. NAT, proxies and shared networks can make source address a weak identity signal.
How specialists test it
Developers test the proposal with made-up data on an isolated test network. They check normal cases and deliberately invalid cases. Different implementations should reach the same result before anyone relies on the proposal.
Frequently asked questions
What is the main point of Bitcoin Core whitelist permissions?
Bitcoin Core whitelist permissions: whitelist applies permissions to peers from an IP address or CIDR network.
For Bitcoin Core whitelist permissions, what should a beginner know about whitelist versus whitebind?
whitelist applies permissions to peers from an IP address or CIDR network.
For Bitcoin Core whitelist permissions, what should a beginner know about explicit permission prefix?
Use comma-separated permissions before an at sign and the address. Omitting the prefix invokes version-specific implicit defaults, so explicit minimal sets are safer and easier to audit.
For Bitcoin Core whitelist permissions, what should a beginner know about noban risk?
noban exempts a peer from automatic banning for misbehaviour in this version.
Conclusion
Peer whitelisting deliberately relaxes Bitcoin Core safeguards. Safe operation grants explicit individual permissions to the smallest reliable address scope and verifies the effective connection after every restart.
Primary sources
Check the current specification status and the documentation for the exact implementation you operate before moving production funds or changing a mining node.



Join the ASIC Mining Discussion
Members can read and join the discussion
Log in to read comments from other miners. Create a free account if you would like to ask a question or share your experience.
Membership helps us protect the discussion from spam and keep answers useful.