Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
CONN (Connections Over Numerous Networks) plugin replaces the old gossip
plugin, covering all its use cases. CONN has these responsibilities:
~/.ssb/conn.json
)Prerequisites:
secret-stack@^6.2.0
Recommended:
Not required, but:
ssb-conn@>=2.0.0
wants to use ssb-db2@>=1.18.0
and ssb-friends@>=4.4.4
ssb-conn@1.0.0
wants to use ssb-db@>=19
and ssb-friends
npm install --save ssb-conn
Add this plugin to ssb-server like this:
var createSsbServer = require('ssb-server')
.use(require('ssb-onion'))
.use(require('ssb-unix-socket'))
.use(require('ssb-no-auth'))
.use(require('ssb-master'))
.use(require('ssb-db2'))
+ .use(require('ssb-conn'))
.use(require('ssb-replicate'))
.use(require('ssb-friends'))
// ...
Now you should be able to access the muxrpc APIs under ssb.conn
and ssb.gossip
, see next section.
You can call any of these APIs in your local peer.
API | Type | Description |
---|---|---|
ssb.conn.connect(addr, data?, cb) | async | Connects to a peer known by its multiserver address addr , and stores additional optional data (as an object) during its connection lifespan. |
ssb.conn.disconnect(addr, cb) | async | Disconnects a peer known by its multiserver address addr . |
ssb.conn.peers() | source | A pull-stream that emits an array of all ConnHub entries whenever any connection updates (i.e. changes it state: connecting, disconnecting, connected, etc). |
ssb.conn.remember(addr, data?) | sync | Stores (in cold storage) connection information about a new peer, known by its multiserver address addr and additional optional data (as an object). |
ssb.conn.forget(addr) | sync | Removes (from cold storage) connection information about a peer known by its multiserver address addr . |
ssb.conn.dbPeers() | sync | Returns an array of ConnDB entries known at the moment. Does not reactively update once the database is written to. |
ssb.conn.stage(addr, data?) | sync | Registers a suggested connection to a new peer, known by its multiserver address addr and additional optional data (as an object). |
ssb.conn.unstage(addr) | sync | Unregisters a suggested connection the peer known by its multiserver address addr . |
ssb.conn.stagedPeers() | source | A pull-stream that emits an array of all ConnStaging entries whenever any staging status updates (upon stage() or unstage()). |
ssb.conn.start() | sync | Triggers the start of the connections scheduler in CONN. |
ssb.conn.stop() | sync | Stops the scheduler if it is currently active. |
An "entry" is a (tuple) array of form:
[addr, data]
where:
addr
is a multiserver address (a string that follows some rules)data
is an object with additional information about the peerdata
(click here)Fields marked 🔷 are important and often used, fields marked 🔹 come from CONN, fields marked 🔸 are ad-hoc and added by various other modules, and fields suffixed with ?
are not always present:
🔷 key: string
: the peer's public key / feedId
🔷 state?: 'connecting' | 'connected' | 'disconnecting'
: (only from peers()
) the peer's current connection status
🔷 type?: string
: what type of peer this is; it can be any string, but often is either 'lan'
, 'bt'
, 'pub'
, 'room'
, 'room-endpoint'
, 'dht'
🔹 inferredType?: 'bt' | 'lan' | 'dht' | 'internet' | 'tunnel'
: (only from peers()
) when there is no type
field, e.g. when a new and unknown peer initiates a client connection with us (as a server), then ConnHub makes a guess what type it is
🔹 birth?: number
: Unix timestamp for when this peer was added to ConnDB
🔹 stateChange?: number
: Unix timestamp for the last time the field state
was changed; this is stored in ConnDB
🔹 hubBirth?: number
: Unix timestamp for when this peer was added to ConnHub
🔹 hubUpdated?: number
: Unix timestamp for when this data object was last updated in ConnHub, which means the last time it was connected or attempted
🔹 stagingBirth?: number
: Unix timestamp for when this peer was added to ConnStaging
🔹 stagingUpdated?: number
: Unix timestamp for when this data object was last updated in ConnStaging
🔹 autoconnect?: boolean
: indicates whether this peer should be considered for automatic connection in the scheduler. By the default this field is considered true
whenever it's undefined, and if you want opt-out of automatic connections for this peer (thus delegating it to a manual choice by the user), then set it to false
.
🔹 failure?: number
: typically stored in ConnDB, this is the number of connection errors since the last successful connection
🔹 duration?: object
: typically stored in ConnDB, this is a statistics object to measure the duration of connection with this peer
🔹 ping?: object
: typically stored in ConnDB, this is statistics object of various ping health measurements
🔹 pool?: 'db' | 'hub' | 'staging'
: this only appears in ConnQuery APIs, and indicates from which pool (ConnDB or ConnHub or ConnStaging) was this peer picked
🔸 name?: string
: a nickname for this peer, when there isn't an ssb-about name
🔸 room?: string
: (only if type = 'room-attendant'
) the public key of the room server where this peer is in
🔸 onlineCount?: number
: (only if type = 'room'
) the number of room endpoints currently connected to this room
CONN also provides more detailed APIs by giving you access to the internals, ConnDB, ConnHub, ConnStaging, ConnQuery. These are APIs that we discourage using, simply because in the vast majority of the cases, the basic API is enough (you might just need a few pull-stream operators on the basic APIs), but if you know what you're doing, don't feel afraid to use the advanced APIs!
API | Type | Description |
---|---|---|
ssb.conn.ping() | duplex | A duplex pull-stream for periodically pinging with peers, fully compatible with ssb.gossip.ping . |
sbb.conn.db() | sync | Returns the instance of ConnDB currently in use. Read their docs to get access to more APIs. |
ssb.conn.hub() | sync | Returns the instance of ConnHub currently in use. Read their docs to get access to more APIs. |
ssb.conn.staging() | sync | Returns the instance of ConnStaging currently in use. Read their docs to get access to more APIs. |
ssb.conn.query() | sync | Returns the instance of ConnQuery currently in use. Read their docs to get access to more APIs. |
The following gossip plugin APIs are available once you install CONN:
API | Type |
---|---|
ssb.gossip.ping() | duplex |
If you want to use other legacy ssb.gossip.*
APIs and preserve the same gossip behavior as before, use ssb-legacy-conn
which uses parts of CONN and tries to mirrors the old gossip plugin as closely as possible, even its log messages.
Some parameters in CONN can be configured by the user or by application code through the conventional ssb-config. The possible options are listed below:
{
"conn": {
/**
* Whether the CONN scheduler should start automatically as soon as the
* SSB app is initialized. Default is `true`.
*/
"autostart": boolean,
/**
* Whether the CONN scheduler should look into the SSB database looking for
* messages of type 'pub' and add them to CONN. Default is `true`.
*/
"populatePubs": boolean,
}
}
You can use ssb.conn.peers()
to get a stream of "all peers currently being processed" and then use Array filter
to pick only peers that are strictly connected, ignoring those that are connecting or disconnecting:
var connectedPeersStream = pull(
ssb.conn.peers(),
pull.map(entries =>
entries.filter(([addr, data]) => data.state === 'connected')
)
)
Then you can drain the stream to get an array of connected peers:
pull(
connectedPeersStream,
pull.drain(connectedPeers => {
console.log(connectedPeers)
// [
// ['net:192.168.1...', {key: '@Ql...', ...}],
// ['net:192.168.2...', {key: '@ye...', ...}]
// ]
})
)
ssb-conn-query has APIs for that and others, e.g.
var arr = ssb.conn.query().peersConnected()
console.log(arr)
// [
// ['net:192.168.1...', {key: '@Ql...', ...}],
// ['net:192.168.2...', {key: '@ye...', ...}]
// ]
If the above doesn't work (for instance, conn.query()
is not available in the CLI and other similar cases), you can use ssb.conn.peers()
plus some pull-stream operators:
function getConnectedPeersNow(cb) {
pull(
ssb.conn.peers(),
pull.map(entries =>
entries.filter(([addr, data]) => data.state === 'connected')
)
pull.take(1), // This is important
pull.drain(connectedPeers => cb(null, connectedPeers))
)
}
getConnectedPeersNow(arr => console.log(arr))
Under the hood, CONN is based on three "pools" of peers:
ConnDB contains metadata on stable servers and peers that have been successfully connectable. ConnHub is the central API that allows us to issue new connections and disconnections, as well as to track the currently active connections. ConnStaging is an in-memory ephemeral storage of new possible connections that the user might want to approve or disapprove.
Then, ConnQuery has access to those three pools, and provides utilities to query, filter, and sort connections across all those pools.
ConnScheduler is an opinionated (⚠️) plugin that utilizes ConnQuery to select peers to connect to, then schedules connections to happen via ConnHub, as well as schedules disconnections if necessary. Being opinionated, CONN provides an easy way of replacing the default scheduler with your own scheduler, see instructions below.
There is also a Gossip Compatibility plugin, implementing all the legacy APIs, so that other SSB plugins that call these APIs will continue to function as normal.
When you install the ssb-plugin, it will actually setup three plugins:
[conn, connScheduler, gossip]
The default scheduler is roughly the same as the legacy ssb-gossip plugin, with some opinions removed and others added. The scheduler has two parts: discovery setup on startup, and periodic connections/disconnections.
Discovery setup:
remember
themstage
themstage
themstage
themPeriodic connections/disconnections:
In none of the cases above shall we connect to a peer that we block. In addition to the above, the following actions happen automatically every (approximately) 1 second:
autoconnect=false
Database cleanups:
Upon starting the scheduler:
Other events:
To experiment with your own opinions for establishing connections, you can make your own ConnScheduler, which is just a typical SSB plugin. You can write in the traditional style (like other SSB plugins), or with OOP decorators. The example below uses OOP decorators.
Here is the basic shape of the scheduler:
module.exports = {
name: 'connScheduler',
version: '1.0.0',
manifest: {
start: 'sync',
stop: 'stop',
},
init(ssb, config) {
return {
start() {
// this is called when the scheduler should begin making connections
// You have access to CONN core here:
ssb.conn.stage('some multiserver address');
ssb.conn.disconnect('another multiserver address');
// ...
},
stop() {
// this is called when the scheduler should cancel its jobs, if any
}
}
}
}
Note that the name of the plugin must be exactly connScheduler
(or connScheduler
) and it must have the methods start() and stop(), because the CONN core will try to use your scheduler under those names. The rest of the contents of the ConnScheduler class are up to you, you can use private methods, etc.
When you're done building your scheduler, you can export it together with CONN core and the gossip compatibility plugin like this:
var CONN = require('ssb-conn/core')
var Gossip = require('ssb-conn/compat')
var ConnScheduler = require('./my-scheduler')
module.exports = [CONN, ConnScheduler, Gossip]
That array is a valid secret-stack plugin which you can .use()
in ssb-server.
The legacy gossip plugin is one of the oldest parts of the SSB stack in Node.js, and it contained several old opinions. It wasn't designed with multiserver in mind, so it made a lot of assumptions that peers have host
/port
fields. Nowadays with Bluetooth and other unusual modes of connectivity, that assumption breaks down often.
The gossip plugin also did not have the concept of "staging", which is useful for ephemeral connections (LAN or Bluetooth) in spaces that may have many strangers. So the gossip plugin tended to connect as soon as possible to any peer discovered.
Also, since the gossip plugin was a monolith, it had all these concerns (cold persistence, in-memory tracking of current connections, ephemeral peers, scheduling, old and new style addresses) squashed into one file, making it hard and brittle to change the code.
The objectives with CONN were to:
[address, dataObject]
MIT
FAQs
SSB plugin for establishing and managing peer connections
We found that ssb-conn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.