search

libp2p / specs

Technical specifications for the libp2p networking stack
https://libp2p.io
1.56k stars 273 forks source link

autonat/README: Document DOS attack prevention #369

Closed mxinden closed 2 years ago

mxinden commented 2 years ago

Document that peers MUST NOT dial addresses that are not based on the IP addresses the requesting node is observed as.

Corresponding logic in Golang implementation:

https://github.com/libp2p/go-libp2p-autonat/blob/1247ac6d9fa798e7032127878a6f3d0b9eb487c6/svc.go#L133-L147

(Pointed out by @marten-seemann.)

mxinden commented 2 years ago

Sorry for the force-push. I missed that the autonat branch is behind current master.