Floodfill router DoS Mitigation about i2p.i2p

[bonedaddy]

@zzzi2p for short term fixes, aggressive sybil analysis settings will work. I configured my router to run sybil analysis every 60 minutes, with a min blocking score of 20, and to only analyze floodfill routers.

This seems to have worked fairly well so far

[zzzi2p]

Thanks for the ideas. Right now we're working on short-term mitigations while we continue investigating.

Almost everything above is a protocol change that would need to be proposed, documented, reviewed with i2pd, and implemented, following our proposal process. That of course takes a while. The best place to workshop ideas where people will see them is on our development forum zzz.i2p.

[TheRook]

I tried to access zzz.i2p and it is down... maybe DDoS?

Almost everything above is a protocol change that would need to be proposed, documented, reviewed with i2pd, and implemented, following our proposal process. That of course takes a while. The best place to workshop ideas where people will see them is on our development forum zzz.i2p.

I did my best to provide a short term fix and a longer term fix. Honestly adding a small fixed zero prefix, even two or three zeros will be the least complex method with the greatest impact, and it is a solution we have seen work in production. I understand resources are limited, but you aren't the only network with this problem. Adding a small hashcash-like PoW is a lot easier than a distributed trust store using something like Freenet's Loctus or OrbitDB.

freenet/freenet-core#458
freenet/freenet-core#244

No one has a distributed reputation solution yet, but together we have the best chance.

[coolst3r]

Thanks for the ideas. Right now we're working on short-term mitigations while we continue investigating.

Almost everything above is a protocol change that would need to be proposed, documented, reviewed with i2pd, and implemented, following our proposal process. That of course takes a while. The best place to workshop ideas where people will see them is on our development forum zzz.i2p.

why not limit the amount of flood fill routers the user can change it the amount from 1 - 20 flood fill and ignore the rest