Skip to content

feat: protect archive RPC resources #5638

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ukint-vs wants to merge 3 commits into
base: master
Choose a base branch
from
Open

feat: protect archive RPC resources #5638

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
2ea9909
feat: protect archive RPC resources
ukint-vs Aug 17, 2026
d3889e1
fix: satisfy CI policy checks
ukint-vs Aug 18, 2026
6a7ced6
test: isolate sc-cli runner log filter
ukint-vs Aug 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .config/hakari.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,11 +29,13 @@ workspace-hack-line-style = "workspace-dotted"

[final-excludes]
workspace-members = [
"sc-cli",
"sc-executor",
"sc-executor-common",
"sc-executor-polkavm",
"sc-executor-wasmtime",
"sc-mixnet",
"sc-service",
"sp-allocator",
"sp-runtime-interface-proc-macro",
"sp-wasm-interface",
Expand Down Expand Up @@ -80,9 +82,7 @@ third-party = [
{ name = "pallet-utility", git = "https://github.com/paritytech/polkadot-sdk.git", rev = "298f676c91d64f15f38ea7fd78f125c5889ab09c" },
{ name = "pallet-vesting", git = "https://github.com/paritytech/polkadot-sdk.git", rev = "298f676c91d64f15f38ea7fd78f125c5889ab09c" },
{ name = "pallet-whitelist", git = "https://github.com/paritytech/polkadot-sdk.git", rev = "298f676c91d64f15f38ea7fd78f125c5889ab09c" },
{ name = "sc-cli", git = "https://github.com/paritytech/polkadot-sdk.git", rev = "298f676c91d64f15f38ea7fd78f125c5889ab09c" },
{ name = "sc-client-db", git = "https://github.com/paritytech/polkadot-sdk.git", rev = "298f676c91d64f15f38ea7fd78f125c5889ab09c" },
{ name = "sc-service", git = "https://github.com/paritytech/polkadot-sdk.git", rev = "298f676c91d64f15f38ea7fd78f125c5889ab09c" },
{ name = "sp-runtime", git = "https://github.com/paritytech/polkadot-sdk.git", rev = "298f676c91d64f15f38ea7fd78f125c5889ab09c" },
{ name = "sp-staking", git = "https://github.com/paritytech/polkadot-sdk.git", rev = "298f676c91d64f15f38ea7fd78f125c5889ab09c" },
]
2 changes: 1 addition & 1 deletion .github/ansible/tasks/docker/docker-compose-vara.yaml.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ services:
{% if connect == "yes" %} --in-peers 100 --out-peers 100 {% endif %}
{% if rpc == "yes" %} --unsafe-ws-external --ws-max-connections='1000' --unsafe-rpc-external --rpc-cors all {% endif %}
{% if archive_node == "yes" %} --ws-max-connections='1000' --unsafe-ws-external --unsafe-rpc-external --pruning archive --rpc-cors all {% endif %}

{% if rpc_method_limits is defined %}{% for rpc_method_limit in rpc_method_limits %} --rpc-method-limit={{ rpc_method_limit }}{% endfor %}{% endif %}
{% if loki is defined and loki == "yes" and loki_url is defined %}
logging:
driver: loki
Expand Down
1 change: 1 addition & 0 deletions .github/ansible/tasks/docker/docker-compose.yaml.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ services:
{% if rpc is defined and unsafe == "no" and archive_node == "yes" %} --ws-external --rpc-external --pruning archive {% endif %}
{% if rpc is defined %} --rpc-methods Unsafe --rpc-cors all {% endif %}
{% if archive_node is defined and archive_node == "yes" and validator is defined and validator == "yes" %} --unsafe-ws-external --rpc-cors all --rpc-methods Unsafe {% endif %}
{% if rpc_method_limits is defined %}{% for rpc_method_limit in rpc_method_limits %} --rpc-method-limit={{ rpc_method_limit }} {% endfor %}{% endif %}

{% if loki is defined and loki == "yes" and loki_url is defined %}
logging:
Expand Down
136 changes: 109 additions & 27 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading