radicle-dev / radicle-link

The second iteration of the Radicle code collaboration protocol.
Other
423 stars 39 forks source link

Connection rate limit needed for reliability #678

Open viraptor opened 3 years ago

viraptor commented 3 years ago

At some point recently, a number of seed nodes have been spawned in the 188.120.224.0/20 (TheFirst-RU) range, which behave more aggressively with connections than other seeds. The result has been a flood of "new ingress stream" at around 1 per ms. This caused my seed to enter a loop of overloading and crashing.

Since there's no network-visible markers for new streams, I could not filter out that traffic with a firewall. (had to drop that range completely) It looks like the rate-limiting needs to be implemented in radicle itself to keep it stable.