chore: restrict node subnet