Martin Stone Davis wrote:
Ian Clarke wrote:
A node would therefore know, for all of its references, how many
requests it is permitted to send (within a time-period) and NGR could
even take account of that information in some way, although that is
probably over-ambitious for an initial implementation.

probably too ambitious, but maybe worth stating as a longer term goal


Now, it would be better if we didn't need to resort to this approach,

why ? solely because it is more complex ? i won't argue with that, but is there another reason ?

so we should continue to try to get the QR mechanism to work, but
this is probably a good last-resort.

simple is better, when possible



I *think* I understand (on the basis of IRC chat) what you're proposing here:

What if a node tries to get greedy and query more than his allocation? I

If so, doesn't this allow for a really easy DoS attack? Wouldn't a malicious node only have to use a small portion of bandwidth to exceed his allocation and halt queries for everyone else?
yes

Yet another possibility is to not use a per-node quota system, but instead use a public quota system. A node tells everyone "I'll be able to handle up to x queries FROM EVERYONE IN TOTAL for the next y seconds" and then strictly enforces that statement. (It may be best if the node
this is not practical - a single client/requestor node cannot know how
many nodes she is sharing with. And she really shouldn't be told.
Therefore the number only represents an unreachable ceiling to her. It
is just not possible to handle this as a collective thing. The control
has to be forced down to the per-node level, to achieve anything.

  No, it is not in the best interest of a user to be greedy. But it most
clearly -IS- in the interest of someone who might like to overload
things, if at all possible.

chose x to be a bit higher than he really expects to be able to handle. That way, he doesn't risk his node being under-utilized if it turns out he has more capacity than expected.)

being under-utilized is a less severe risk than getting over-utilized, as regarding the health of the freenetwork.

The public quota system avoids making it so much easier for a malicious node to force us to QR. Also, we retain benefit of having made our QR:s

Please explain how in more detail !


Thanks,
 Ken


_______________________________________________ Devl mailing list [EMAIL PROTECTED] http://dodo.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to