Add transaction rate-limit functionality for testnet

Author: m-Peter

api/utils.go

@@ -131,6 +131,8 @@ func handleError[T any](err error, log zerolog.Logger, collector metrics.Collect
 		return zero, err
 	case errors.Is(err, core.ErrInsufficientFunds):
 		return zero, err
+	case errors.Is(err, errs.ErrRateLimit):
+		return zero, err
 	default:
 		collector.ApiErrorOccurred()
 		log.Error().Err(err).Msg("api error")

cmd/run/cmd.go

@@ -222,6 +222,12 @@ func parseConfigFromFlags() error {
 		return fmt.Errorf("unknown tx state validation: %s", txStateValidation)
 	}
 
+	txDuration, err := time.ParseDuration(txDurationLimit)
+	if err != nil {
+		return fmt.Errorf("invalid unit %s for TX duration limit: %w", txDuration, err)
+	}
+	cfg.TxDurationLimit = txDuration
+
 	return nil
 }
 
@@ -242,7 +248,8 @@ var (
 	cloudKMSLocationID,
 	cloudKMSKeyRingID,
 	walletKey,
-	txStateValidation string
+	txStateValidation,
+	txDurationLimit string
 
 	initHeight,
 	forceStartHeight uint64
@@ -280,4 +287,6 @@ func init() {
 	Cmd.Flags().StringVar(&cfg.ProfilerHost, "profiler-host", "localhost", "Host for the Profiler server")
 	Cmd.Flags().IntVar(&cfg.ProfilerPort, "profiler-port", 6060, "Port for the Profiler server")
 	Cmd.Flags().StringVar(&txStateValidation, "tx-state-validation", "tx-seal", "Sets the transaction validation mechanism. It can validate using the local state index, or wait for the outer Flow transaction to seal. Available values ('local-index' / 'tx-seal'), defaults to 'tx-seal'.")
+	Cmd.Flags().Uint64Var(&cfg.TxRequestLimit, "tx-request-limit", 1, "Number of transaction submissions to allow per the specified interval. Applies only on Testnet.")
+	Cmd.Flags().StringVar(&txDurationLimit, "tx-duration-limit", "3s", "Time interval upon which to enforce transaction submission rate limiting. Applies only on Testnet.")
 }

config/config.go

@@ -89,4 +89,9 @@ type Config struct {
 	// TxStateValidation sets the transaction validation mechanism. It can validate
 	// using the local state index, or wait for the outer Flow transaction to seal.
 	TxStateValidation string
+	// TxRequestLimit is the number of transaction submissions to allow per interval.
+	TxRequestLimit uint64
+	// TxDurationLimit is the time interval upon which to enforce transaction submission
+	// rate limiting.
+	TxDurationLimit time.Duration
 }

services/requester/requester.go

@@ -21,6 +21,8 @@ import (
 	"github.com/onflow/go-ethereum/core/txpool"
 	"github.com/onflow/go-ethereum/core/types"
 	"github.com/rs/zerolog"
+	"github.com/sethvargo/go-limiter"
+	"github.com/sethvargo/go-limiter/memorystore"
 	"golang.org/x/sync/errgroup"
 
 	"github.com/onflow/flow-evm-gateway/config"
@@ -110,6 +112,7 @@ type EVM struct {
 	evmSigner         types.Signer
 	validationOptions *txpool.ValidationOptions
 	collector         metrics.Collector
+	limiter           limiter.Store
 }
 
 func NewEVM(
@@ -166,6 +169,16 @@ func NewEVM(
 		MinTip:  new(big.Int),
 	}
 
+	ratelimiter, err := memorystore.New(
+		&memorystore.Config{
+			Tokens:   config.TxRequestLimit,
+			Interval: config.TxDurationLimit,
+		},
+	)
+	if err != nil {
+		return nil, fmt.Errorf("failed to create TX rate limiter: %w", err)
+	}
+
 	evm := &EVM{
 		registerStore:     registerStore,
 		client:            client,
@@ -178,6 +191,7 @@ func NewEVM(
 		validationOptions: validationOptions,
 		collector:         collector,
 		keystore:          keystore,
+		limiter:           ratelimiter,
 	}
 
 	return evm, nil
@@ -202,6 +216,13 @@ func (e *EVM) SendRawTransaction(ctx context.Context, data []byte) (common.Hash,
 		return common.Hash{}, fmt.Errorf("failed to derive the sender: %w", err)
 	}
 
+	if e.config.FlowNetworkID == flowGo.Testnet {
+		_, _, _, ok, _ := e.limiter.Take(ctx, from.Hex())
+		if !ok {
+			return common.Hash{}, errs.ErrRateLimit
+		}
+	}
+
 	if tx.GasPrice().Cmp(e.config.GasPrice) < 0 {
 		return common.Hash{}, errs.NewTxGasPriceTooLowError(e.config.GasPrice)
 	}