⚡️ How encrypted connections work on Headframe

What is stratum+tls?

It is a secure connection between your miner and the pool. It encrypts all traffic so that no one — not even your internet service provider — can see what you are mining, how many shares you are sending, or understand what is happening in general.

It's like a secure messenger, but for mining.

Stratums for connection:

stratum+tls://tls-gate1.headframe.io:3010

stratum+tls://tls-gate2.headframe.io:3011

Enter the stratum of a third-party pool in the third place.

Why do you need an encrypted connection?

With a regular connection via stratum:
– traffic is not encrypted
– he network administrator or provider can theoretically see what you are mining

With encryption (stratum+tls://...):
– data is fully protected
– no one will know what you are mining and how much
– it is safe even on an untrusted network (for example, on a rented site or in someone else's data center, if the ASIC supports TLS).

Which miners connect to stratum+tls:// directly? 

✅ Whatsminer (new models, such as M53) — everything works right away.

⚠️ Antminer (including S21) — does not support direct connection, even with the latest firmware.

What to do if TLS is not supported directly?

1. Use a proxy that supports TLS.

How it works:

1. All ASICs connect to the internal IP proxy.

2. The proxy forwards traffic to our pool via an encrypted channel.

3. Internal traffic between devices and the proxy is not encrypted (which is normal), but everything going outside is protected.

If you have a large container with different devices or firmware that does not support TLS, a proxy is the solution.

⚠️ We do not configure proxies and do not have a ready-made solution — this process takes place on the client side.

2. Use firmware that supports TLS on your ASIC model.

Is this definitely secure?

Yes. We use the TLS 1.3 protocol — the same one that protects online banking, government services, and most of the internet.

Who needs this?

– If you mine from home and want no one to see your traffic.
– If you are on a shared network.
– If you want to reduce the risk of interference from your provider or platform.
– If you just want peace of mind :)

⚡️ If you don't need to hide your traffic, you can leave the usual stratum. It is as secure as before and allows you to mine stably and safely.