Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,57 +1,31 @@ | ||
| # orderflow-proxy | ||
|
|
||
| [](https://goreportcard.com/report/github.com/flashbots/go-template) | ||
| [](https://github.com/flashbots/go-template/actions?query=workflow%3A%22Checks%22) | ||
|
|
||
| ## Getting started | ||
|
|
||
| **Build** | ||
|
|
||
| ```bash | ||
| make build | ||
| ``** | ||
|
|
||
| ## Run | ||
|
|
||
| `./build/orderflow-proxy` | ||
|
|
||
| Will | ||
|
|
||
| * create metrics server | ||
| * internal server (liveness endpoints) | ||
| * orderflow proxy server that will generate self signed certificate and use it to accept requests that will be proxied to the local builder endpoint | ||
|
|
||
| Flags for the orderflow proxy | ||
|
|
||
| ``` | ||
| --listen-addr value address to listen on for orderflow proxy API (default: "127.0.0.1:9090") | ||
| --builder-endpoint value address to send local ordeflow to (default: "127.0.0.1:8546") | ||
| --cert-duration value generated certificate duration (default: 8760h0m0s) | ||
| --cert-hosts value [ --cert-hosts value ] generated certificate hosts (default: "127.0.0.1", "localhost") | ||
| ``` |
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,79 @@ | ||
| package proxy | ||
|
|
||
| import ( | ||
| "bytes" | ||
| "crypto/ecdsa" | ||
| "crypto/elliptic" | ||
| "crypto/rand" | ||
| "crypto/x509" | ||
| "crypto/x509/pkix" | ||
| "encoding/pem" | ||
| "math/big" | ||
| "net" | ||
| "time" | ||
| ) | ||
|
|
||
| // hosts is a list of ip / dns names for the certificate | ||
| func GenerateCert(validFor time.Duration, hosts []string) (cert, key []byte, err error) { | ||
| // copied from https://go.dev/src/crypto/tls/generate_cert.go | ||
| priv, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader) | ||
| keyUsage := x509.KeyUsageDigitalSignature | ||
|
|
||
| notBefore := time.Now() | ||
| notAfter := notBefore.Add(validFor) | ||
|
|
||
| serialNumberLimit := new(big.Int).Lsh(big.NewInt(1), 128) | ||
| serialNumber, err := rand.Int(rand.Reader, serialNumberLimit) | ||
| if err != nil { | ||
| return nil, nil, err | ||
| } | ||
|
|
||
| template := x509.Certificate{ | ||
| SerialNumber: serialNumber, | ||
| Subject: pkix.Name{ | ||
| Organization: []string{"Acme"}, | ||
| }, | ||
| NotBefore: notBefore, | ||
| NotAfter: notAfter, | ||
|
|
||
| KeyUsage: keyUsage, | ||
| ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}, | ||
| BasicConstraintsValid: true, | ||
| } | ||
|
|
||
| for _, h := range hosts { | ||
| if ip := net.ParseIP(h); ip != nil { | ||
| template.IPAddresses = append(template.IPAddresses, ip) | ||
| } else { | ||
| template.DNSNames = append(template.DNSNames, h) | ||
| } | ||
| } | ||
|
|
||
| // certificate is its own CA | ||
| template.IsCA = true | ||
| template.KeyUsage |= x509.KeyUsageCertSign | ||
|
|
||
| derBytes, err := x509.CreateCertificate(rand.Reader, &template, &template, &priv.PublicKey, priv) | ||
| if err != nil { | ||
| return nil, nil, err | ||
| } | ||
|
|
||
| var certOut bytes.Buffer | ||
| if err = pem.Encode(&certOut, &pem.Block{Type: "CERTIFICATE", Bytes: derBytes}); err != nil { | ||
| return nil, nil, err | ||
| } | ||
| cert = certOut.Bytes() | ||
|
|
||
| privBytes, err := x509.MarshalPKCS8PrivateKey(priv) | ||
| if err != nil { | ||
| return nil, nil, err | ||
| } | ||
|
|
||
| var keyOut bytes.Buffer | ||
| err = pem.Encode(&keyOut, &pem.Block{Type: "PRIVATE KEY", Bytes: privBytes}) | ||
| if err != nil { | ||
| return nil, nil, err | ||
| } | ||
| key = keyOut.Bytes() | ||
| return | ||
| } | ||
Oops, something went wrong.