63 Commits (85b6823d164f3520d5c7e1187c13bd3f59402341)

Author	SHA1	Message	Date
obscuren	688d118c7e	Updated logging	10 years ago
Felix Lange	de7af720d6	p2p/discover: implement node bonding ... This a fix for an attack vector where the discovery protocol could be used to amplify traffic in a DDOS attack. A malicious actor would send a findnode request with the IP address and UDP port of the target as the source address. The recipient of the findnode packet would then send a neighbors packet (which is 16x the size of findnode) to the victim. Our solution is to require a 'bond' with the sender of findnode. If no bond exists, the findnode packet is not processed. A bond between nodes α and β is created when α replies to a ping from β. This (initial) version of the bonding implementation might still be vulnerable against replay attacks during the expiration time window. We will add stricter source address validation later.	10 years ago
Felix Lange	92928309b2	p2p/discover: add version number to ping packet ... The primary motivation for doing this right now is that old PoC 8 nodes and newer PoC 9 nodes keep discovering each other, causing handshake failures.	10 years ago
Felix Lange	7ea131d4ff	p2p/discover: fix pending replies iteration ... Range expressions capture the length of the slice once before the first iteration. A range expression cannot be used here since the loop modifies the slice variable (including length changes).	10 years ago
Felix Lange	cf754b9483	p2p/discover: fix race in ListenUDP ... udp.Table was assigned after the readLoop started, so packets could arrive and be processed before the Table was there.	10 years ago
Felix Lange	170eb3ac68	p2p/discover: map listening port using configured mechanism	10 years ago
Felix Lange	82f0bd9009	p2p/discover: code review fixes	10 years ago
Felix Lange	9915d3c3be	p2p/discover: deflake UDP tests	10 years ago
Felix Lange	8564eb9f7e	p2p/discover: add node URL functions, distinguish TCP/UDP ports ... The discovery RPC protocol does not yet distinguish TCP and UDP ports. But it can't hurt to do so in our internal model.	10 years ago
Felix Lange	739066ec56	p2p/discover: add some helper functions	10 years ago
Felix Lange	12224c7f59	p2p/discover: new package implementing the Node Discovery Protocol	10 years ago