Implement mechanism for a node to request connection to a micro service.

project-oak / oak

Meaningful control of data in distributed systems.

Apache License 2.0

1.32k stars 113 forks source link

Implement mechanism for a node to request connection to a micro service. #437

Closed conradgrobler closed 2 years ago

conradgrobler commented 4 years ago

Example: trusted time might be provided as a psuedo node, rather than a host function. A wasm node should be able to request a channel and then use the channel to request the trusted time. The channel should block requests once the node has seen any secret data, as time request make external network requests which could be used as a side channel to leak data.

daviddrysdale commented 4 years ago

We now have pseudo-Nodes that allow:

connection to an external gRPC service (#640)
connection to a Roughtime client (#845)

However, still need to check that information flow control works correctly with these pseudo-Nodes when it gets fully implemented (#630).