Comments (6)
I guess this would work if you know the port of the execution node. But not sure how cautious one should be with directly exposing the local node.
from suave-geth.
Agreed. I'm going to bring this up with the team and get back to you.
from suave-geth.
@halo3mic so the issue is that we don't want to leak the node's IP:PORT tuple, as it exposes us to DoS. However, I believe this recently-added feature would satisfy your requirement.
Instead of
string memory httpAddr = Suvve.resolveDns("goerli")
Suave.httpRequest({.... addr: httpAddr})
You would do something like Suave.httpRequest({... addr: "goerli"})
.
from suave-geth.
Do you think this still exposes the execution node to ddos - you can do CCR using this new feature without any cost (if MEVM execution fails no gas is paid)?
I believe you are correct, though this is on our list of things to figure out "in the future". Off-the-cuff, gating this through a CCR allows us to do things like load balancing, or possibly introducing some sort of gas tax. TBD.
Glad this fixes the issue! 🙂
from suave-geth.
In principle, could this be achieved using SUAVE's HTTP precompile? It seems like it would be a straightforward matter of providing you with the execution node's URL, and then leaving it up to you to perform JSON-RPC requests.
(cc @ferranbt)
from suave-geth.
@halo3mic so the issue is that we don't want to leak the node's IP:PORT tuple, as it exposes us to DoS. However, I believe this recently-added feature would satisfy your requirement.
Instead of
string memory httpAddr = Suvve.resolveDns("goerli") Suave.httpRequest({.... addr: httpAddr})
You would do something like
Suave.httpRequest({... addr: "goerli"})
.
Oh cool! This seems like it resolves the issue
Do you think this still exposes the execution node to ddos - you can do CCR using this new feature without any cost (if MEVM execution fails no gas is paid)?
from suave-geth.
Related Issues (18)
- Restricting access to EVM callback
- RPC port fixed to 8545 in dev mode HOT 1
- Add wildcard to docker set-up
- More Configurable Builder Sessions
- Max Builder Sessions
- Add CLI flag + EnvVar for max concurrent builder sessions HOT 2
- End Builder Session on New Block HOT 1
- No Deneb payload HOT 3
- Private Key Gen Precompile HOT 5
- How to ensure a piece of state is only used by a CCR once HOT 4
- Precompiles `simulateBundle` & `submitBundleJsonRPC` have different inputs
- Service Not Available Message
- suaveup installation without root password
- `buildEthblock` precompile fails with 'out of gas' with large payload HOT 1
- suave-geth locally does not revert when a confidential request update state storage HOT 3
- parameterize `genesisForkVersion` in `buildEthBlockTo` HOT 2
- `--json` flag in `spell deploy`
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from suave-geth.