Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Management of requests to @IP from RFC 1918 so as not to be emitted on public Internet #34

Open
poussette opened this issue Mar 24, 2021 · 2 comments
Assignees

Comments

@poussette
Copy link

I noticed the nodes emit requests to RFC 1918 addresses (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16). I assume that these are @home nodes with some NAT or local network configuration or with more than one network card with private network, so they are collected and produce requests in the protocol. However, unless they are local to a local testnet, these are unnecessary requests since they are not routed over the public Internet. these tcp requests are all initiated in SYN_SENT from the node but never have a SYN_ACK response then the socket closes just behind. Even if it doesn't necessarily consume a lot of resources Couldn't there be a bit of configuration for nodes (prefs.toml?) so as to choose to use them or not (local testnet vs full public IP mainnet). ?

I have currently set following rules on my firewall so as requests not to be sent unnecessarily on the Internet and be clean with the hosting provider.
To:192.168.0.0/16/tcp DENY IN from:Anywhere
To:10.0.0.0/8/tcp DENY IN from:Anywhere
To:172.16.0.0/12/tcp DENY IN from:Anywhere

Best regards.

Poussette

@poussette poussette changed the title management of request to @IP from RFC 1918 so as not to be emitted on public Internet Management of requests to @IP from RFC 1918 so as not to be emitted on public Internet Mar 24, 2021
@iulianpascalau iulianpascalau self-assigned this Mar 31, 2021
@iulianpascalau
Copy link
Contributor

Thanks for reporting this. We need to further investigate how we can interact with the libp2p's libraries in order to silent those requests. Will remain open for now.

@iulianpascalau
Copy link
Contributor

Hello, does this problem still occurs? The reason I'm asking this is that we did not find anything to tune from the libp2p libs that we are using.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants