Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

spec: Discuss how to harden the Part dissemination protocol #818

Open
cason opened this issue Jan 29, 2025 · 2 comments
Open

spec: Discuss how to harden the Part dissemination protocol #818

cason opened this issue Jan 29, 2025 · 2 comments
Labels
configuration Configuration of the node dependencies Related to dependencies spec Related to specifications

Comments

@cason
Copy link
Contributor

cason commented Jan 29, 2025

This consideration came after discussing the topic with @jtremback and @greg-szabo.

We need some anti-spam mechanism to harden the Parts dissemination protocol. Essentially, we can be overloaded by invalid (Part) messages sent by anyone that is able to join/subscribe to the propagation channel or topic.

@cason cason added configuration Configuration of the node dependencies Related to dependencies spec Related to specifications labels Jan 29, 2025
@cason cason changed the title spec: Discuss how the hardener the Part dissemination protocol spec: Discuss how to hardener the Part dissemination protocol Jan 29, 2025
@cason
Copy link
Contributor Author

cason commented Jan 29, 2025

At the moment, we only check if the signature of a received Part message is valid and has been produced by the proposer of the associated height and round.

@cason
Copy link
Contributor Author

cason commented Jan 29, 2025

There is a section on Spam on gossipsub docs/specs: https://github.com/libp2p/specs/blob/master/pubsub/gossipsub/gossipsub-v1.1.md#spam-protection-measures

@romac romac changed the title spec: Discuss how to hardener the Part dissemination protocol spec: Discuss how to harden the Part dissemination protocol Jan 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
configuration Configuration of the node dependencies Related to dependencies spec Related to specifications
Projects
None yet
Development

No branches or pull requests

1 participant