5 Commits (da7332a7317bda9003e5e8a4aaa4b1710c69b664)

Author	SHA1	Message	Date
Felix Lange	de7af720d6	p2p/discover: implement node bonding ... This a fix for an attack vector where the discovery protocol could be used to amplify traffic in a DDOS attack. A malicious actor would send a findnode request with the IP address and UDP port of the target as the source address. The recipient of the findnode packet would then send a neighbors packet (which is 16x the size of findnode) to the victim. Our solution is to require a 'bond' with the sender of findnode. If no bond exists, the findnode packet is not processed. A bond between nodes α and β is created when α replies to a ping from β. This (initial) version of the bonding implementation might still be vulnerable against replay attacks during the expiration time window. We will add stricter source address validation later.	10 years ago
obscuren	4f5b362bda	%#x => %x	10 years ago
Felix Lange	2c505efd1e	p2p/discover: add NodeID.Pubkey	10 years ago
Felix Lange	82f0bd9009	p2p/discover: code review fixes	10 years ago
Felix Lange	8564eb9f7e	p2p/discover: add node URL functions, distinguish TCP/UDP ports ... The discovery RPC protocol does not yet distinguish TCP and UDP ports. But it can't hurt to do so in our internal model.	10 years ago