search

lightning / bolts

BOLT: Basis of Lightning Technology (Lightning Network Specifications)
2.07k stars 491 forks source link

include DDoS mitigation scheme in network specification #122

Open ghost opened 7 years ago

ghost commented 7 years ago

DDoSing lightning network node is very critical attack and mitigation method is needed. For example, node discovery should not rely on ip address, and nodes should be able to relay packets behaving as proxy for other nodes.

rustyrussell commented 7 years ago

This is a fundamental issue with running a public node, whether it's a bitcoin node or a lightning node. Proxying creates the same DDoS issues, just internal to the lightning network.

One thing we can do is to add an optional message supplying confirmed peers with alternate address(es) to connect to. This allows a site to have a different address for peers who share channels.