1

In public blockchain, DDOS is thwarted via the use of gas transaction fee. In private blockchain (i.e., enterprise ethereum Quorum), how can DDOS be thwarted? Through throttling?

  • Correct me if i'm wrong. security in private blockchains is from knowing your peers. Why would you need to anticipate attacks like DOS when it would adversely affect the attacker? – Vignesh Karthikeyan Jul 5 '18 at 15:08
2

Even though, in Quorum a user can send transactions for free, Quorum does not provide a DDoS protection more than what Ethereum do.

To verify the above statement, you can check Quorum documentation and you will find nothing about DDoS (Wiki: https://github.com/jpmorganchase/quorum/wiki). Additionally, you can go to Quorum and the original Ethereum repository and search for DDoS. It will give you the same results for both Code and Commits sections.

Then why Quorum does not care a lot about DDoS, even though it charge free gas for transactions? Let us bring those points to attention:

  • First, for any account to send any transaction, it has to contain some Ether. So, trying to send transactions from a fresh wallet will not succeed.
  • Second, Quorum is supposed to run on a private network. This means that you can have more control on the network and people will tend not to launch an attack; because, most likely you will know the attacker machine and identity.
  • The third thing is that you should consider putting your Quorum nodes behind a firewall that do a DDoS protection.

However, putting all previous in mind, you can still be exposed to some sort of DDoS attacks. And if it happens, you can do nothing but use the conventional ways to prevent and stop that. And in most cases this will be more than enough I think. And I hope that Quorum will address this point better and work on some enhancements for this regards.

  • Thanks. Am worried that these quorum nodes may be hijacked – Nathan Aw Jul 12 '18 at 14:45
  • If there is a chance to hijack nodes or end-user machines, this could happen with Ethereum and Quorum. And this is the responsibility of the infrastructure (like Firewall & Antivirus). And the responsibility of the operators/users to not install Malware and Trojans. – Muhammad Altabba Jul 12 '18 at 18:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.