Hi there, thanks for the tips.

To be clear, each node does of course use different signing keys and the websocket proxy I wrote actually attempts public API servers if our own servers are down.

With regards to the witness node being low memory: this might in fact make sense but i'm loathe to touch the configuration right now until more hardware becomes available - which should be within a week.

At that point i'll look at swapping the primary witness node to low memory on a dedicated VPS. The hetzner server can then be used more freely for R&D without causing missing blocks.