Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Guide for how to respond to resource exhaustion attacks #153

Closed
Tracked by #1711
BigLep opened this issue Jun 1, 2022 · 2 comments
Closed
Tracked by #1711

Guide for how to respond to resource exhaustion attacks #153

BigLep opened this issue Jun 1, 2022 · 2 comments
Assignees

Comments

@BigLep
Copy link
Contributor

BigLep commented Jun 1, 2022

Done Criteria

We have a document we can point libp2p operators to in defense of or response to various resource exhaustion attacks (DoS, eclipse).

Why Important

Especially in the heat of battle, every minute reducing response/mitigation times can be significant. Having suggestions/steps prethought outside the fog of war will provide better suggestions in a quicker period of time.

User/customer

Anyone operating a libp2p node in production. This could range from desktop users to system administrators.

Notes

  1. This should range from the full set of knobs available to an operator from implementation-specific items like go-libp2p resource manager config changes to more "nuclear" options like operating system iptable/firewall rules.
  2. Anything developed in Defend against eclipse attacks with ALLOW-list support go-libp2p-resource-manager#29 should be included.
  3. It's true system admins won't need coaching on operating system defense mechanisms, but this is relevant to surface for less-trained users.
  4. An important aspect of this document layout is account for the OS items that are implementation agnostic to the implementation specific items. It's possible that implementation-specific docs live in the implementation repos and are linked from this docs.libp2p.io page.
  5. Once Guide for libp2p node monitoring #158 is done, we should link to it as well.
@BigLep BigLep transferred this issue from libp2p/go-libp2p-resource-manager Jun 1, 2022
@MarcoPolo MarcoPolo self-assigned this Jun 2, 2022
@MarcoPolo
Copy link
Contributor

I assigned this to myself but I'd love pair on this with someone from fil-infra/bifrost.

@p-shahi
Copy link
Member

p-shahi commented Aug 26, 2022

Done in v0.21.0 and deployed https://docs.libp2p.io/reference/dos-mitigation/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants