The Sentry Node Architecture is an infrastructure example for DDoS mitigation on validator networks.
Sentry Node Architecture
Anchor Staking Nodes (Validators) are responsible for ensuring that the network can sustain denial of service attacks.
One recommended way to mitigate these risks is for validators to carefully structure their network topology in a so-called sentry node architecture.
We at Anchor Staking deploy a minimum of one sentry at all times with a maximum of three per network.
Private keys are stored 'cold' whenever a network allows.
*image credit Tendermint, learn more here