-
Notifications
You must be signed in to change notification settings - Fork 117
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Security: Send notfound inv items to the inv collector, Credit: Equilibrium #2156
Closed
5 tasks done
Tracked by
#2311
Labels
A-network
Area: Network protocol updates or fixes
A-rust
Area: Updates to Rust code
C-security
Category: Security issues
I-hang
A Zebra component stops responding to requests
I-remote-node-overload
Zebra can overload other nodes on the network
Comments
This was referenced Dec 8, 2021
This was referenced Dec 15, 2021
This was referenced Jan 30, 2022
3 tasks
6 tasks
mpguerra
added a commit
that referenced
this issue
May 19, 2023
mergify bot
pushed a commit
that referenced
this issue
May 23, 2023
* ZIPs were updated to remove ambiguity, this was tracked in #1267. * #2105 was fixed by #3039 and #2379 was closed by #3069 * #2230 was a duplicate of #2231 which was closed by #2511 * #3235 was obsoleted by #2156 which was fixed by #3505 * #1850 was fixed by #2944, #1851 was fixed by #2961 and #2902 was fixed by #2969 * We migrated to Rust 2021 edition in Jan 2022 with #3332 * #1631 was closed as not needed * #338 was fixed by #3040 and #1162 was fixed by #3067 * #2079 was fixed by #2445 * #4794 was fixed by #6122 * #1678 stopped being an issue * #3151 was fixed by #3934 * #3204 was closed as not needed * #1213 was fixed by #4586 * #1774 was closed as not needed * #4633 was closed as not needed * Clarify behaviour of difficulty spacing Co-authored-by: teor <teor@riseup.net> * Update comment to reflect implemented behaviour Co-authored-by: teor <teor@riseup.net> * Update comment to reflect implemented behaviour when retrying block downloads Co-authored-by: teor <teor@riseup.net> * Update `TODO` to remove closed issue and clarify when we might want to fix Co-authored-by: teor <teor@riseup.net> * Update `TODO` to remove closed issue and clarify what we might want to change in future Co-authored-by: teor <teor@riseup.net> * Clarify benefits of how we do block verification Co-authored-by: teor <teor@riseup.net> * Fix rustfmt errors --------- Co-authored-by: teor <teor@riseup.net>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
A-network
Area: Network protocol updates or fixes
A-rust
Area: Updates to Rust code
C-security
Category: Security issues
I-hang
A Zebra component stops responding to requests
I-remote-node-overload
Zebra can overload other nodes on the network
Is your feature request related to a problem? Please describe.
Zebra currently ignores
notfound
responses from peers.notfound
items, if a peer has recently told us that item was not found, we should redirect or reject that item request.This helps prevent request/response loops.
A similar issue was reported by Niklas Long of Equilibrium.
Describe the solution you'd like
notfound
messages to theinv
collectornotfound
messages to theinv
collector when peers don't find an item, if the peer doesn't actually send anotfound
messagenotfound
messages to theinv
collector when the peer request times out, or is dropped for some other reason (use theDrop
impl)zebra_network::Request
, and also document that requests for multiple items wait for data ornotfound
for all of them (or wait for an obviously unrelated response)Client
sends a request for an item:inv
collector)notfound
for the itemDescribe alternatives you've considered
This doesn't seem to be causing any issues right now, so we might not need to do this fix.
Dependencies
This change might be easier after we do #1973.
The text was updated successfully, but these errors were encountered: