gitee.com/liu-zhao234568/cntest@v1.0.0/les/utils/limiter.go (about)

     1  // Copyright 2020 The go-ethereum Authors
     2  // This file is part of the go-ethereum library.
     3  //
     4  // The go-ethereum library is free software: you can redistribute it and/or modify
     5  // it under the terms of the GNU Lesser General Public License as published by
     6  // the Free Software Foundation, either version 3 of the License, or
     7  // (at your option) any later version.
     8  //
     9  // The go-ethereum library is distributed in the hope that it will be useful,
    10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
    11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    12  // GNU Lesser General Public License for more details.
    13  //
    14  // You should have received a copy of the GNU Lesser General Public License
    15  // along with the go-ethereum library. If not, see <http://www.gnu.org/licenses/>.
    16  
    17  package utils
    18  
    19  import (
    20  	"sort"
    21  	"sync"
    22  
    23  	"gitee.com/liu-zhao234568/cntest/p2p/enode"
    24  )
    25  
    26  const maxSelectionWeight = 1000000000 // maximum selection weight of each individual node/address group
    27  
    28  // Limiter protects a network request serving mechanism from denial-of-service attacks.
    29  // It limits the total amount of resources used for serving requests while ensuring that
    30  // the most valuable connections always have a reasonable chance of being served.
    31  type Limiter struct {
    32  	lock sync.Mutex
    33  	cond *sync.Cond
    34  	quit bool
    35  
    36  	nodes                          map[enode.ID]*nodeQueue
    37  	addresses                      map[string]*addressGroup
    38  	addressSelect, valueSelect     *WeightedRandomSelect
    39  	maxValue                       float64
    40  	maxCost, sumCost, sumCostLimit uint
    41  	selectAddressNext              bool
    42  }
    43  
    44  // nodeQueue represents queued requests coming from a single node ID
    45  type nodeQueue struct {
    46  	queue                   []request // always nil if penaltyCost != 0
    47  	id                      enode.ID
    48  	address                 string
    49  	value                   float64
    50  	flatWeight, valueWeight uint64 // current selection weights in the address/value selectors
    51  	sumCost                 uint   // summed cost of requests queued by the node
    52  	penaltyCost             uint   // cumulative cost of dropped requests since last processed request
    53  	groupIndex              int
    54  }
    55  
    56  // addressGroup is a group of node IDs that have sent their last requests from the same
    57  // network address
    58  type addressGroup struct {
    59  	nodes                      []*nodeQueue
    60  	nodeSelect                 *WeightedRandomSelect
    61  	sumFlatWeight, groupWeight uint64
    62  }
    63  
    64  // request represents an incoming request scheduled for processing
    65  type request struct {
    66  	process chan chan struct{}
    67  	cost    uint
    68  }
    69  
    70  // flatWeight distributes weights equally between each active network address
    71  func flatWeight(item interface{}) uint64 { return item.(*nodeQueue).flatWeight }
    72  
    73  // add adds the node queue to the address group. It is the caller's responsibility to
    74  // add the address group to the address map and the address selector if it wasn't
    75  // there before.
    76  func (ag *addressGroup) add(nq *nodeQueue) {
    77  	if nq.groupIndex != -1 {
    78  		panic("added node queue is already in an address group")
    79  	}
    80  	l := len(ag.nodes)
    81  	nq.groupIndex = l
    82  	ag.nodes = append(ag.nodes, nq)
    83  	ag.sumFlatWeight += nq.flatWeight
    84  	ag.groupWeight = ag.sumFlatWeight / uint64(l+1)
    85  	ag.nodeSelect.Update(ag.nodes[l])
    86  }
    87  
    88  // update updates the selection weight of the node queue inside the address group.
    89  // It is the caller's responsibility to update the group's selection weight in the
    90  // address selector.
    91  func (ag *addressGroup) update(nq *nodeQueue, weight uint64) {
    92  	if nq.groupIndex == -1 || nq.groupIndex >= len(ag.nodes) || ag.nodes[nq.groupIndex] != nq {
    93  		panic("updated node queue is not in this address group")
    94  	}
    95  	ag.sumFlatWeight += weight - nq.flatWeight
    96  	nq.flatWeight = weight
    97  	ag.groupWeight = ag.sumFlatWeight / uint64(len(ag.nodes))
    98  	ag.nodeSelect.Update(nq)
    99  }
   100  
   101  // remove removes the node queue from the address group. It is the caller's responsibility
   102  // to remove the address group from the address map if it is empty.
   103  func (ag *addressGroup) remove(nq *nodeQueue) {
   104  	if nq.groupIndex == -1 || nq.groupIndex >= len(ag.nodes) || ag.nodes[nq.groupIndex] != nq {
   105  		panic("removed node queue is not in this address group")
   106  	}
   107  
   108  	l := len(ag.nodes) - 1
   109  	if nq.groupIndex != l {
   110  		ag.nodes[nq.groupIndex] = ag.nodes[l]
   111  		ag.nodes[nq.groupIndex].groupIndex = nq.groupIndex
   112  	}
   113  	nq.groupIndex = -1
   114  	ag.nodes = ag.nodes[:l]
   115  	ag.sumFlatWeight -= nq.flatWeight
   116  	if l >= 1 {
   117  		ag.groupWeight = ag.sumFlatWeight / uint64(l)
   118  	} else {
   119  		ag.groupWeight = 0
   120  	}
   121  	ag.nodeSelect.Remove(nq)
   122  }
   123  
   124  // choose selects one of the node queues belonging to the address group
   125  func (ag *addressGroup) choose() *nodeQueue {
   126  	return ag.nodeSelect.Choose().(*nodeQueue)
   127  }
   128  
   129  // NewLimiter creates a new Limiter
   130  func NewLimiter(sumCostLimit uint) *Limiter {
   131  	l := &Limiter{
   132  		addressSelect: NewWeightedRandomSelect(func(item interface{}) uint64 { return item.(*addressGroup).groupWeight }),
   133  		valueSelect:   NewWeightedRandomSelect(func(item interface{}) uint64 { return item.(*nodeQueue).valueWeight }),
   134  		nodes:         make(map[enode.ID]*nodeQueue),
   135  		addresses:     make(map[string]*addressGroup),
   136  		sumCostLimit:  sumCostLimit,
   137  	}
   138  	l.cond = sync.NewCond(&l.lock)
   139  	go l.processLoop()
   140  	return l
   141  }
   142  
   143  // selectionWeights calculates the selection weights of a node for both the address and
   144  // the value selector. The selection weight depends on the next request cost or the
   145  // summed cost of recently dropped requests.
   146  func (l *Limiter) selectionWeights(reqCost uint, value float64) (flatWeight, valueWeight uint64) {
   147  	if value > l.maxValue {
   148  		l.maxValue = value
   149  	}
   150  	if value > 0 {
   151  		// normalize value to <= 1
   152  		value /= l.maxValue
   153  	}
   154  	if reqCost > l.maxCost {
   155  		l.maxCost = reqCost
   156  	}
   157  	relCost := float64(reqCost) / float64(l.maxCost)
   158  	var f float64
   159  	if relCost <= 0.001 {
   160  		f = 1
   161  	} else {
   162  		f = 0.001 / relCost
   163  	}
   164  	f *= maxSelectionWeight
   165  	flatWeight, valueWeight = uint64(f), uint64(f*value)
   166  	if flatWeight == 0 {
   167  		flatWeight = 1
   168  	}
   169  	return
   170  }
   171  
   172  // Add adds a new request to the node queue belonging to the given id. Value belongs
   173  // to the requesting node. A higher value gives the request a higher chance of being
   174  // served quickly in case of heavy load or a DDoS attack. Cost is a rough estimate
   175  // of the serving cost of the request. A lower cost also gives the request a
   176  // better chance.
   177  func (l *Limiter) Add(id enode.ID, address string, value float64, reqCost uint) chan chan struct{} {
   178  	l.lock.Lock()
   179  	defer l.lock.Unlock()
   180  
   181  	process := make(chan chan struct{}, 1)
   182  	if l.quit {
   183  		close(process)
   184  		return process
   185  	}
   186  	if reqCost == 0 {
   187  		reqCost = 1
   188  	}
   189  	if nq, ok := l.nodes[id]; ok {
   190  		if nq.queue != nil {
   191  			nq.queue = append(nq.queue, request{process, reqCost})
   192  			nq.sumCost += reqCost
   193  			nq.value = value
   194  			if address != nq.address {
   195  				// known id sending request from a new address, move to different address group
   196  				l.removeFromGroup(nq)
   197  				l.addToGroup(nq, address)
   198  			}
   199  		} else {
   200  			// already waiting on a penalty, just add to the penalty cost and drop the request
   201  			nq.penaltyCost += reqCost
   202  			l.update(nq)
   203  			close(process)
   204  			return process
   205  		}
   206  	} else {
   207  		nq := &nodeQueue{
   208  			queue:      []request{{process, reqCost}},
   209  			id:         id,
   210  			value:      value,
   211  			sumCost:    reqCost,
   212  			groupIndex: -1,
   213  		}
   214  		nq.flatWeight, nq.valueWeight = l.selectionWeights(reqCost, value)
   215  		if len(l.nodes) == 0 {
   216  			l.cond.Signal()
   217  		}
   218  		l.nodes[id] = nq
   219  		if nq.valueWeight != 0 {
   220  			l.valueSelect.Update(nq)
   221  		}
   222  		l.addToGroup(nq, address)
   223  	}
   224  	l.sumCost += reqCost
   225  	if l.sumCost > l.sumCostLimit {
   226  		l.dropRequests()
   227  	}
   228  	return process
   229  }
   230  
   231  // update updates the selection weights of the node queue
   232  func (l *Limiter) update(nq *nodeQueue) {
   233  	var cost uint
   234  	if nq.queue != nil {
   235  		cost = nq.queue[0].cost
   236  	} else {
   237  		cost = nq.penaltyCost
   238  	}
   239  	flatWeight, valueWeight := l.selectionWeights(cost, nq.value)
   240  	ag := l.addresses[nq.address]
   241  	ag.update(nq, flatWeight)
   242  	l.addressSelect.Update(ag)
   243  	nq.valueWeight = valueWeight
   244  	l.valueSelect.Update(nq)
   245  }
   246  
   247  // addToGroup adds the node queue to the given address group. The group is created if
   248  // it does not exist yet.
   249  func (l *Limiter) addToGroup(nq *nodeQueue, address string) {
   250  	nq.address = address
   251  	ag := l.addresses[address]
   252  	if ag == nil {
   253  		ag = &addressGroup{nodeSelect: NewWeightedRandomSelect(flatWeight)}
   254  		l.addresses[address] = ag
   255  	}
   256  	ag.add(nq)
   257  	l.addressSelect.Update(ag)
   258  }
   259  
   260  // removeFromGroup removes the node queue from its address group
   261  func (l *Limiter) removeFromGroup(nq *nodeQueue) {
   262  	ag := l.addresses[nq.address]
   263  	ag.remove(nq)
   264  	if len(ag.nodes) == 0 {
   265  		delete(l.addresses, nq.address)
   266  	}
   267  	l.addressSelect.Update(ag)
   268  }
   269  
   270  // remove removes the node queue from its address group, the nodes map and the value
   271  // selector
   272  func (l *Limiter) remove(nq *nodeQueue) {
   273  	l.removeFromGroup(nq)
   274  	if nq.valueWeight != 0 {
   275  		l.valueSelect.Remove(nq)
   276  	}
   277  	delete(l.nodes, nq.id)
   278  }
   279  
   280  // choose selects the next node queue to process.
   281  func (l *Limiter) choose() *nodeQueue {
   282  	if l.valueSelect.IsEmpty() || l.selectAddressNext {
   283  		if ag, ok := l.addressSelect.Choose().(*addressGroup); ok {
   284  			l.selectAddressNext = false
   285  			return ag.choose()
   286  		}
   287  	}
   288  	nq, _ := l.valueSelect.Choose().(*nodeQueue)
   289  	l.selectAddressNext = true
   290  	return nq
   291  }
   292  
   293  // processLoop processes requests sequentially
   294  func (l *Limiter) processLoop() {
   295  	l.lock.Lock()
   296  	defer l.lock.Unlock()
   297  
   298  	for {
   299  		if l.quit {
   300  			for _, nq := range l.nodes {
   301  				for _, request := range nq.queue {
   302  					close(request.process)
   303  				}
   304  			}
   305  			return
   306  		}
   307  		nq := l.choose()
   308  		if nq == nil {
   309  			l.cond.Wait()
   310  			continue
   311  		}
   312  		if nq.queue != nil {
   313  			request := nq.queue[0]
   314  			nq.queue = nq.queue[1:]
   315  			nq.sumCost -= request.cost
   316  			l.sumCost -= request.cost
   317  			l.lock.Unlock()
   318  			ch := make(chan struct{})
   319  			request.process <- ch
   320  			<-ch
   321  			l.lock.Lock()
   322  			if len(nq.queue) > 0 {
   323  				l.update(nq)
   324  			} else {
   325  				l.remove(nq)
   326  			}
   327  		} else {
   328  			// penalized queue removed, next request will be added to a clean queue
   329  			l.remove(nq)
   330  		}
   331  	}
   332  }
   333  
   334  // Stop stops the processing loop. All queued and future requests are rejected.
   335  func (l *Limiter) Stop() {
   336  	l.lock.Lock()
   337  	defer l.lock.Unlock()
   338  
   339  	l.quit = true
   340  	l.cond.Signal()
   341  }
   342  
   343  type (
   344  	dropList     []dropListItem
   345  	dropListItem struct {
   346  		nq       *nodeQueue
   347  		priority float64
   348  	}
   349  )
   350  
   351  func (l dropList) Len() int {
   352  	return len(l)
   353  }
   354  
   355  func (l dropList) Less(i, j int) bool {
   356  	return l[i].priority < l[j].priority
   357  }
   358  
   359  func (l dropList) Swap(i, j int) {
   360  	l[i], l[j] = l[j], l[i]
   361  }
   362  
   363  // dropRequests selects the nodes with the highest queued request cost to selection
   364  // weight ratio and drops their queued request. The empty node queues stay in the
   365  // selectors with a low selection weight in order to penalize these nodes.
   366  func (l *Limiter) dropRequests() {
   367  	var (
   368  		sumValue float64
   369  		list     dropList
   370  	)
   371  	for _, nq := range l.nodes {
   372  		sumValue += nq.value
   373  	}
   374  	for _, nq := range l.nodes {
   375  		if nq.sumCost == 0 {
   376  			continue
   377  		}
   378  		w := 1 / float64(len(l.addresses)*len(l.addresses[nq.address].nodes))
   379  		if sumValue > 0 {
   380  			w += nq.value / sumValue
   381  		}
   382  		list = append(list, dropListItem{
   383  			nq:       nq,
   384  			priority: w / float64(nq.sumCost),
   385  		})
   386  	}
   387  	sort.Sort(list)
   388  	for _, item := range list {
   389  		for _, request := range item.nq.queue {
   390  			close(request.process)
   391  		}
   392  		// make the queue penalized; no more requests are accepted until the node is
   393  		// selected based on the penalty cost which is the cumulative cost of all dropped
   394  		// requests. This ensures that sending excess requests is always penalized
   395  		// and incentivizes the sender to stop for a while if no replies are received.
   396  		item.nq.queue = nil
   397  		item.nq.penaltyCost = item.nq.sumCost
   398  		l.sumCost -= item.nq.sumCost // penalty costs are not counted in sumCost
   399  		item.nq.sumCost = 0
   400  		l.update(item.nq)
   401  		if l.sumCost <= l.sumCostLimit/2 {
   402  			return
   403  		}
   404  	}
   405  }