search

linera-io / linera-protocol

Main repository for the Linera protocol
Apache License 2.0
1.44k stars 169 forks source link

DOS protection #2173

Open ndr-ds opened 5 months ago

ndr-ds commented 5 months ago

Right now a user could for example publish a lot of large blobs and never use them, or publish them and delete them later, etc. We should think of cases where users could abuse the existing constraints to put strain or potentially DOS the system.

ma2bd commented 5 months ago

@afck @andresilva91 I believe this task should be more about the kind of (low-level) DoS that is NOT covered by resource policies (aka fees #2172 and limits #2186) at the application level

ndr-ds commented 2 weeks ago

Once we're done with https://github.com/linera-io/linera-protocol/issues/2704 and https://github.com/linera-io/linera-protocol/issues/2172, I believe we should be good on this for now. Potential follow up for this, quoting @afck : I think in a few months we'll also add some kind of rate limiting on the level of each validator individually: If there's lots of failing proposals coming from some IP address, block it for a while, or something like that.

ndr-ds commented 1 week ago

This probably also depends on https://github.com/linera-io/linera-protocol/issues/2199