[pbear2k21]

bitcoind not having ip associated throttling edit: BUILT IN* is questionable. this attack shouldn't work on out-of-the-box installs of bitcoin. as i mentioned earlier - there is no rationale behind a single machine making 1k handshake requests per second.

[BenoitP]

    sudo iptables --append INPUT --source 123.123.123.123 --jump DROP

[pbear2k21]

node operators can implement their own throttling - sure - but how many bitcoin node operators are doing that to deflect a p2p ddos attack? even if some are, most aren't - and finality in the network could potentially suffer as a result of a massively scaled botnet attack.

edit: interesting child comment here. not pushing a patch just leaves the bulk of the network vulnerable to being ddos'd by a botnet - potentially resulting in severely lagged finality at best. ip throttling can/should be implemented by being baked into bitcoind.

[BenoitP]

A one-liner, from a one-purpose-unix standard tool, 20 seconds fix is enough; what more do you want?

This is a not a bug / won't fix

[imtringued]

The attacker used multiple nodes. Read the GitHub issue again. You are going to need more than one line and at some point you are going to notice that you want a software solution.