It's clear that we must include the IP addresses to our validators on our chainspec if we are starting a solo-chain (Correct me if I am wrong here, does it need to be a validator IP or can it be any IP as in the case of a sync node?) and on the other hand, a block producer like BABE which randomizes the next block producer sells itself by shielding validators from DoS attacks by randomizing the next block producer.
My question stems from these two points, if our validators are known (their IPs are on the chainspec OR maybe it is possible to find out the peer ID ip addresses?) and the network is relatively small (which is true at the beginning of every network), how or if is it even possible to prevent a DoS attack?
Moreover, since Babe has a hard requirement of seeing at least one block per epoch, otherwise the chain stalls, it could very well be possible that the network sees an
epoch seconds long DoS attack from adversaries and effectively stall the chain.
Am I correct to understand this situation here?