eco-stake / cosmos-directory

⚛️ · 📖
https://cosmos.directory
MIT License
79 stars 22 forks source link

DDOS from TC Network #81

Closed staking-explorer closed 7 months ago

staking-explorer commented 7 months ago

The developer of this product has absolutely no regard for validator resources. Sends tens of thousands of requests in one minute. TC_network_DDOS

staking-explorer commented 7 months ago

All these requests are sent to the proxy, which redistributes the load across public validator nodes. I checked the request signatures, it is the TC network making problems in my case. And I had to temporarily close my public node in JUNO because this product simply floods it with meaningless requests.

staking-explorer commented 7 months ago

@trulacgc-tcnetwork, please comment on why you are sending tens of thousands of requests just for one user... Did you know that JavaScript uses milliseconds (not seconds) to represent epoch time? Or it is your special logic?

What happens if 100 people come to your explorers TXS-page? Are you going to send 10,000+ requests for each of them? Did you know that TXS endpoint to which you send thousands of requests is the most resource-intensive? Have you seen how Ping does the same thing and spends a hundred times less resources on it than you?

I'm waiting for your comments. If you ignore it, I will raise the issue of removing your blockchain explorer from Cosmos Registry. Thank you.

trulacgc-tcnetwork commented 7 months ago

Dear Eco-Stake/Cosmos-Directory

Thanks for raising this issue to us. We are looking at and trying to fix this issue soon.

Best Regards,

On Sat, Apr 27, 2024 at 2:22 PM SE @.***> wrote:

@trulacgc-tcnetwork https://github.com/trulacgc-tcnetwork, please comment on why you are sending tens of thousands of requests just for one user... Did you know that JavaScript uses milliseconds (not seconds) to represent epoch time? Or it is your special logic?

What happens if 100 people come to your explorers TX-page? Are you going to send 10,000+ requests for each of them? Did you know that TXS endpoint to which you send thousands of requests is the most resource-intensive? Have you seen how Ping does the same thing and spends a hundred times less resources on it than you?

I'm waiting for your comments. If you ignore it, I will raise the issue of removing your blockchain explorer from Cosmos Registry. Thank you.

— Reply to this email directly, view it on GitHub https://github.com/eco-stake/cosmos-directory/issues/81#issuecomment-2080398205, or unsubscribe https://github.com/notifications/unsubscribe-auth/AXDUA6FDV66WC4K5YLV6RTTY7NG3PAVCNFSM6AAAAABGZJJ5LSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAOBQGM4TQMRQGU . You are receiving this because you were mentioned.Message ID: @.***>

-- Lam Nguyen,

TC-Network Group

staking-explorer commented 7 months ago

Thank you for your attention to the problem. You have a very excessive number of calls to public nodes. Try to limit their number and do it like Ping, for example (Ping is very economical in using public resources for the same type of explorer as yours).

trulacgc-tcnetwork commented 7 months ago

Hi Eco-Stake

We fixed this issue already, thanks for reaching us.

Best Regards, Lam Nguyen

On Sat, Apr 27, 2024 at 5:29 PM SE @.***> wrote:

Thank you for your attention to the problem. You have a very excessive number of calls to public nodes. Try to limit their number and do it like Ping, for example (Ping is very economical in using public resources for the same type of explorer as yours).

— Reply to this email directly, view it on GitHub https://github.com/eco-stake/cosmos-directory/issues/81#issuecomment-2080445000, or unsubscribe https://github.com/notifications/unsubscribe-auth/AXDUA6DN4WXATZQWPVZV36DY7N4YHAVCNFSM6AAAAABGZJJ5LSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAOBQGQ2DKMBQGA . You are receiving this because you were mentioned.Message ID: @.***>

-- Lam Nguyen,

TC-Network Group

tombeynon commented 7 months ago

Awesome thanks for fixing @trulacgc-tcnetwork and for raising @staking-explorer !

staking-explorer commented 7 months ago

Checked it, fixed. Thanks. image