gochain / rpc-proxy

A proxy layer to sit in front of GoChain/Ethereum JSON-RPC-API to make it more secure and resilient.
Apache License 2.0
61 stars 23 forks source link

Websocket connections limit #81

Open shunsukew opened 9 months ago

shunsukew commented 9 months ago

Hello, I found this repository when considering how to control WebSocket requests. Most of Blockchain nodes themselves doesn't have WebSocket throttling features, and most of API gateway solutions cannot inspect WebSocket messages/frames.

In the current implementation, messages in a connection are rate limited, however attackers can consume lots of sockets. I think it is really good to have limiting connections count per IP/API-Key feature.

shunsukew commented 9 months ago

I found comments about websocket multiplexing here, but limiting connections count from client IP <> proxy is still needed?