I2P Address: [http://git.idk.i2p]

Skip to content

2.3.0 lookup tweaks

idk requested to merge idk/i2p.i2p:2.3.0-lookup-tweaks into master

This checkin will refine how we handle lookups when the lookups appear to be so excessive that they must be malicious in nature. We have observed routers(attackers possibly) who are sending routers hundreds of lookups a second. It could be a bug, or it could also be a phase in an attack like the recent Bloom Filter Replay Attack. If that's the case, they're blasting out the lookup messages with crafted messageIDs in order to see if they observe a replay drop. The collision-avoidance patch which resolves the replay drop attack has already landed but the burst lookups continue to be observed. This patch adds "Burst Limits" which identify burst lookups and ban the routers responsible for it.

Edited by idk

Merge request reports

Loading