Protecting Bitcoin against network-wide DoS attack



Summary:

In a discussion about anti-denial of service (DoS) measures in Bitcoin, John Dillon suggests that non-SPV-mode clients can require incoming peers to do "useful work". As incoming connection slots get used up, the system kicks off the peers who have relayed the least fee-paying transactions and valid blocks, keeping those who have relayed the most. The usual randomized logic for outgoing peers is used to attempt to preserve the randomized structure of the network. During an attack, new connections are made somewhat easier by the increased number of incoming slots made available as the attacker's connections timeout. Peter Todd proposes adding required per-node accounting once nodes get unique identifiers, which can later be used for permanent node identifiers with SSL and message signing.


Updated on: 2023-06-06T19:59:02.705929+00:00