ipfs / ipfs/rainbow

Feature Request: Implement CID allowlist HTTP Middleware

Open
#235 8 comments 0 reactions 0 assignees View on GitHub
dif/medium effort/hours help wanted kind/enhancement P3
Dominant language
Go
Stars
191
Forks
36
Avg merge
8h 11m
Merged PRs (30d)
5

Description

I'm reaching out to discuss an idea I have for enhancing security and access control in the Rainbow IPFS Gateway. I'd like to gauge interest and gather feedback before deciding on implementation.

**My Idea:** Implementing CID allowlist HTTP Middleware

The goal of this feature would be to prevent flooding self-hosted instances with requests or compromised CIDs by restricting access to certain resources based on an allowlist of allowed CIDs. This would reduce the risk of Distributed Denial-of-Service (DDoS) attacks, floods of requests, and unauthorized access attempts.

Before deciding on implementation, I'd like to get your thoughts on the following:

- Is my idea aligned with the project's goals and values?
- Would this feature significantly impact performance or scalability?

---

*Assuming interest in implementing this feature, here are some potential ways it could be done:*

To implement CID allowlist Middleware, we would need to add a middleware layer that intercepts incoming HTTP requests, extracts the CID from the URL path, and checks it against a predefined allowlist.

I'd be happy to contribute to this feature if you're interested. Please let me know if this is something that could be explored further, or if there are any concerns or issues with my idea.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.