Skip to content
This repository was archived by the owner on Nov 15, 2023. It is now read-only.
This repository was archived by the owner on Nov 15, 2023. It is now read-only.

Add a way to block outgoing connections to some IPs #3496

@tomaka

Description

@tomaka

Some hosting company thinks we're attacking them. Substrate should provide some way of blocking outgoing connection attempts to certain subnets that are passed through the CLI.

This needs to be done at the libp2p level, so that for example even Kademlia queries don't get performed. In other words, this is not at the PSM level.

I think the best way to do that is to wrap around the Behaviour struct and tweak the addresses_of_peer method, and filter out multiaddresses that match the subnets we're blocking. addresses_of_peer is only ever used to establish outbound connections.

Metadata

Metadata

Assignees

No one assigned

    Labels

    I4-annoyanceThe client behaves within expectations, however this “expected behaviour” itself is at issue.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions