mirror of
https://github.com/logos-messaging/logos-messaging-nim.git
synced 2026-06-28 12:30:09 +00:00
6a954bdec0
Squash of 13 commits from feat/mix-dos-protection-libp2p-v2.0.0 onto the logos_delivery/ folder-restructure base from #3935 (build-messaging-folder). Original commit history (squashed): - d8e6dcef feat(mix): integrate mix protocol with extended kademlia + RLN spam protection - fb72f18d refactor(mix): split DoS-protection self-registration into background retry - d8bbef0c feat(mix): bump libp2p stack to v2.0.0 + adopt stateless RLN spam protection - 2f24448a fix(tests): use HmacDrbgContext.new() instead of crypto.newRng() - 5a21455c fix(ci): regen nimble.lock for v2.0.0 + disambiguate rng in wakucore - 03ef02a2 fix(tests): wrap HmacDrbgContext via newBearSslRng for libp2p v2.0.0 - 167ab1df fix(nix): regenerate deps.nix from updated nimble.lock - 97a27222 fix(tests): wrap or pass Rng correctly for 3-arg PrivateKey.random - 5561fcb5 fix(tests): replace removed newStandardSwitch with SwitchBuilder - ba39ee4a fix(tests): libp2p v2.0.0 API migrations across test suite - 328e11df fix: gitignore test binaries + remove accidentally-committed binary - cc712444 fix(tests): more v2.0.0 API migrations (rng template, PeerId.random, etc.) - 412d97a9 fix(tests): unblock CI — nph, excise orphan waku_noise, complete v2.0.0 Rng migration Conflict resolutions (#3935 → ours): - 11 import-path migrations: waku/X → logos_delivery/waku/X - waku_node/waku_node/relay.nim: dropped our `registerRelayHandler` proc (relocated to subscription_manager.nim by #3935; see cascade fix below) - factory/builder.nim: combined both sides' new imports (net_config + waku_switch) - factory/conf_builder/mix_conf_builder.nim: libp2p_mix package (not libp2p/protocols/mix) - waku_mix/protocol.nim: combined paths + our mix_rln_spam_protection/relay/nimchronos imports - 3 test files: dropped noise_utils import (replicates noise excision from original PR) - 2 UA file moves: option_shims.nim and waku_mix_coordination.nim added at new paths Cascade fixes (#3935 lost our work, restored): - subscription_manager.nim: added `mixHandler` to #3935's `registerRelayHandler`, and added `waku_mix` to its imports. Without this, mix messages were silently dropped from the relay handler chain. - config.nims: option_shims auto-import path migrated to logos_delivery/... Validation: - nph check on all 82 staged .nim files: clean (0 reformats needed) - wakunode2 build: exit 0, 38 MB binary - (sim PASS confirmed in earlier identical-state run: 5/5 mix init, 5 RLN proofs gen/verify, 0 errors) Backup tag at original tip: backup/3931-pre-3935-rebase (412d97a9).
99 lines
4.4 KiB
Nim
99 lines
4.4 KiB
Nim
# Chronos Test Suite
|
|
# (c) Copyright 2022-Present
|
|
# Status Research & Development GmbH
|
|
#
|
|
# Licensed under either of
|
|
# Apache License, version 2.0, (LICENSE-APACHEv2)
|
|
# MIT license (LICENSE-MIT)
|
|
|
|
{.used.}
|
|
|
|
import testutils/unittests
|
|
import chronos, libp2p/stream/connection, libp2p/crypto/crypto
|
|
import std/options
|
|
|
|
import ../../logos_delivery/waku/common/rate_limit/request_limiter
|
|
import ../../logos_delivery/waku/common/rate_limit/timed_map
|
|
|
|
let proto = "ProtocolDescriptor"
|
|
|
|
let conn1 = Connection(peerId: PeerId.random(newRng()).tryGet())
|
|
let conn2 = Connection(peerId: PeerId.random(newRng()).tryGet())
|
|
let conn3 = Connection(peerId: PeerId.random(newRng()).tryGet())
|
|
|
|
suite "RequestRateLimiter":
|
|
test "RequestRateLimiter Allow up to main bucket":
|
|
# keep limits low for easier calculation of ratios
|
|
let rateLimit: RateLimitSetting = (4, 2.minutes)
|
|
var limiter = newRequestRateLimiter(some(rateLimit))
|
|
# per peer tokens will be 6 / 4min
|
|
# as ratio is 2 in this case but max tokens are main tokens*ratio . 0.75
|
|
# notice meanwhile we have 8 global tokens over 2 period (4 mins) in sum
|
|
# See: waku/common/rate_limit/request_limiter.nim #func calcPeriodRatio
|
|
|
|
let now = Moment.now()
|
|
# with first use we register the peer also and start its timer
|
|
check limiter.checkUsage(proto, conn2, now) == true
|
|
for i in 0 ..< 3:
|
|
check limiter.checkUsage(proto, conn1, now) == true
|
|
|
|
check limiter.checkUsage(proto, conn2, now + 3.minutes) == true
|
|
for i in 0 ..< 3:
|
|
check limiter.checkUsage(proto, conn1, now + 3.minutes) == true
|
|
|
|
# conn1 reached the 75% of the main bucket over 2 periods of time
|
|
check limiter.checkUsage(proto, conn1, now + 3.minutes) == false
|
|
|
|
# conn2 has not used its tokens while we have 1 more tokens left in the main bucket
|
|
check limiter.checkUsage(proto, conn2, now + 3.minutes) == true
|
|
|
|
test "RequestRateLimiter Restrict overusing peer":
|
|
# keep limits low for easier calculation of ratios
|
|
let rateLimit: RateLimitSetting = (10, 2.minutes)
|
|
var limiter = newRequestRateLimiter(some(rateLimit))
|
|
# per peer tokens will be 15 / 4min
|
|
# as ratio is 2 in this case but max tokens are main tokens*ratio . 0.75
|
|
# notice meanwhile we have 20 tokens over 2 period (4 mins) in sum
|
|
# See: waku/common/rate_limit/request_limiter.nim #func calcPeriodRatio
|
|
|
|
let now = Moment.now()
|
|
# with first use we register the peer also and start its timer
|
|
for i in 0 ..< 10:
|
|
check limiter.checkUsage(proto, conn1, now) == true
|
|
|
|
# run out of main tokens but still used one more token from the peer's bucket
|
|
check limiter.checkUsage(proto, conn1, now) == false
|
|
|
|
for i in 0 ..< 4:
|
|
check limiter.checkUsage(proto, conn1, now + 3.minutes) == true
|
|
|
|
# conn1 reached the 75% of the main bucket over 2 periods of time
|
|
check limiter.checkUsage(proto, conn1, now + 3.minutes) == false
|
|
|
|
check limiter.checkUsage(proto, conn2, now + 3.minutes) == true
|
|
check limiter.checkUsage(proto, conn2, now + 3.minutes) == true
|
|
check limiter.checkUsage(proto, conn3, now + 3.minutes) == true
|
|
check limiter.checkUsage(proto, conn2, now + 3.minutes) == true
|
|
check limiter.checkUsage(proto, conn3, now + 3.minutes) == true
|
|
|
|
# conn1 gets replenished as the ratio was 2 giving twice as long replenish period than the main bucket
|
|
# see waku/common/rate_limit/request_limiter.nim #func calcPeriodRatio and calcPeerTokenSetting
|
|
check limiter.checkUsage(proto, conn1, now + 4.minutes) == true
|
|
# requests of other peers can also go
|
|
check limiter.checkUsage(proto, conn2, now + 4100.milliseconds) == true
|
|
check limiter.checkUsage(proto, conn3, now + 5.minutes) == true
|
|
|
|
test "RequestRateLimiter lowest possible volume":
|
|
# keep limits low for easier calculation of ratios
|
|
let rateLimit: RateLimitSetting = (1, 1.seconds)
|
|
var limiter = newRequestRateLimiter(some(rateLimit))
|
|
|
|
let now = Moment.now()
|
|
# with first use we register the peer also and start its timer
|
|
check limiter.checkUsage(proto, conn1, now + 500.milliseconds) == true
|
|
|
|
# run out of main tokens but still used one more token from the peer's bucket
|
|
check limiter.checkUsage(proto, conn1, now + 800.milliseconds) == false
|
|
check limiter.checkUsage(proto, conn1, now + 1499.milliseconds) == false
|
|
check limiter.checkUsage(proto, conn1, now + 1501.milliseconds) == true
|