Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Node attempts to connect to local address peers #523

Closed
icarusglider opened this issue Jan 22, 2018 · 3 comments
Closed

Node attempts to connect to local address peers #523

icarusglider opened this issue Jan 22, 2018 · 3 comments

Comments

@icarusglider
Copy link
Contributor

icarusglider commented Jan 22, 2018

It has been found that when discovering peers, any node with local address peers will advertise these peers to others. This causes every node to attempt to connect to local address ranges, which can cause issues for certain hosting providers (seen with Hetzner.de so far, "suspicious traffic").

Suggest removing 192.168.0.0/16, 172.22.0.0/12, 10.0.0.0/8 from peer list before it is sent to other nodes. Also suggest preventing attempts to connect to peers on said subnets if the bound ip of the node is not also on such a subnet.

image

@PlasmaPower
Copy link
Contributor

There is a blacklist for addresses. Do we need to add some ranges?

@icarusglider
Copy link
Contributor Author

icarusglider commented Jan 22, 2018

This should only be filtered out under certain circumstances. We would not want multiple nodes on the same subnet to be unable to connect locally.

The peer list sent to other nodes not already on the same subnet should not have private range addresses. That should be sufficient to prevent such traffic.

@elliottneilclark
Copy link
Contributor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants