HackMD
Threats we want to mitigate with ResourceManager
List by priority
- 100 nodes controlled for the same entity connecting to our node, avoiding connections from other legit nodes (eclipse attack).
- 100 nodes asking to our node to do some work, making our node to go down.
- 1 node opening many connections to our node, forcing that node to do more work.
- Open and close really fast connections to a node.
- TLS handshake DoS.
What we want to avoid
- Node crashing
- Node degraded performance for other nodes or actions
- Fail to handle new peers connections
Other possible solutions to apply with ResourceManager
- Limit to 1 connections by IP
- Check ConnectionGater https://pkg.go.dev/github.com/libp2p/go-libp2p-core/connmgr#ConnectionGater
