[go: up one dir, main page]

Rollup node: configurable and secure default ACL

What

This MR forbids some expensive RPC to be made from remote hosts in order to protect the rollup node.

Why

Fixes #2885 (closed), #7044.

Manually testing the MR

Run the rollup node for etherlink and call:

curl -v <HOST>:<PORT>/global/block/head/durable/wasm_2_0_0/subkeys?key=/evm/world_state/blocks

it should answer with

< HTTP/1.1 401 Unauthorized

Merge request reports

Loading