AllCoreDevs - Testing #095
Transcript
- Iván | ethrex
gm
- spencer
The cool (cl) kids leave us!
- Justin Traglia
Reacted to "The cool (cl) kids leave us!" with 😆
- CPerezz
Reacted to "The cool (cl) kids l..." with 😆
- jochem-brouwer
gm gm😄
- Justin Traglia
https://github.com/ethereum/pm/issues/2209#issuecomment-5483605197
- Stefan Starflinger
gm gm
- danceratopz
📋 Agenda for today https://github.com/ethereum/pm/issues/2209
- Pooja Ranjan
Reacted to "📋 Agenda for today https://github.com/ethereum/pm/issues/2209" with 👍
- danceratopz
-> glamsterdam-devnet-8 (Platåberget) updates - led by @qu0b Platåberget test case knocked out 12/13 Besu nodes and lagged Erigon + Ethrex: https://github.com/ethereum/pm/issues/2209#issuecomment-5568033889 https://notes.ethereum.org/@ethpandaops/glamsterdam-devnet-8
- Pooja Ranjan
Reacted to "https://github.com/ethereum/pm/issues/2209#issuecomment-5483605197" with 👍
- Toni Wahrstätter
Payloads missing is also me
- CPerezz
What hardware are nodes running on? Recommended, more, or less?
- Stefan Starflinger
8 cores 16 GB RAM
- Stefan Starflinger
digital ocean
- CPerezz
Seems a bit below recommended hardware specs? https://eips.ethereum.org/EIPS/eip-7870 Not saying is not important to tackle ofc. But trying to understand severity
- Marius Van Der Wijden (M)
Do nodes have tracing enabled on these nodes?
- Stefan Starflinger
Replying to "Do nodes have tracin..." yes
- Marius Van Der Wijden (M)
Replying to "Do nodes have tracin..." That will make things much harder tbh
- Stefan Starflinger
Replying to "Do nodes have tracin..." i've now disabled traces and debug on some of the besu nodes
- pk910
Replying to "Do nodes have tracin..." tracoor is requesting traces from every node
- Marius Van Der Wijden (M)
Replying to "Do nodes have tracin..." You guys really hate us :(
- Stefan Starflinger
Reacted to "You guys really hate..." with 🥶
- spencer
Do we have a shared place where we document all these devnet "attacks"? Just so we can add them to future devnets automatically, similar for some of Toni's etc
- pk910
Reacted to "You guys really hate..." with 🥶
- jochem-brouwer
Antwoord verzenden naar "Do we have a share..." We should move these spamoor files to a specific places so we can take those "attacks" from there. I am not sure where to put those though
- jochem-brouwer
Otherwise they are scattered over different folders/repos
- CPerezz
Replying to "Do we have a shared ..." Maybe a plugins repo or similar?
- Nico Flaig
nimbus seems fine to me
- pk910
Replying to "Do we have a shared ..." there are spammer configs included in the repo that are accessible from the frontend. sounds like a good place - but public
- spencer
Reacted to "there are spammer ..." with 🙏
- jochem-brouwer
Antwoord verzenden naar "Do we have a share..." Ok great, I will add these attacks there :)
- jochem-brouwer
Heeft gereageerd op "there are spammer ..." met 🙏
- Toni Wahrstätter
Replying to "Do we have a shared ..." Spamoor is not flexible enough
- Justin Traglia
Reacted to "Spamoor is not flexible enough" with 👍
- Maria Silva
@jochem-brouwer , how many accounts have you deployed for this attack?
- CPerezz
Replying to "Do we have a shared ..." For EL it is no? What are u missing there?
- jochem-brouwer
Antwoord verzenden naar "@jochem-brouwer , ..." 100k
- Toni Wahrstätter
Replying to "Do we have a shared ..." Attacks are cross layer
- jochem-brouwer
Antwoord verzenden naar "@jochem-brouwer , ..." Effectively I only target 66.667 accounts
- jochem-brouwer
Antwoord verzenden naar "@jochem-brouwer , ..." This is the spamoor attack: Deploys a JUMPDEST-contract caller that cycles through indices 4000..70678 only, then hits it with full-block zero-calldata txs that keeps loop-calling these contracts and saves where it ended up at, such that the next tx can pick that up. Targets contracts were created by spamoor ID 100. Signed off by Jochem.
- Marius Van Der Wijden (M)
Replying to "Do we have a shared ..." Problem is that they are multiple gbs
- Maria Silva
Replying to "@jochem-brouwer , ho..." Ok, so clients should be using their cache for later blocks, right?
- CPerezz
Replying to "Do we have a shared ..." Jochem’s one wasn’t. I agree it doesn’t solve everything. But covers a decent range of EL stuff with plugins. We can try supporting BALs. CL is ofc hard
- Caleb
there was something about Nimbus? missed it sorry
- danceratopz
🩹 glamsterdam-devnet-9 (the planned non-finality devnet) updates + post-mortems - led by @qu0b Planned non-finality trigger not reached; ~28 h of unplanned non-finality then recovery on Sep 3 tested it anyway. https://notes.ethereum.org/@ethpandaops/glamsterdam-devnet-9
- jochem-brouwer
Antwoord verzenden naar "@jochem-brouwer , ..." Yes, which makes this even more scary :)
- jochem-brouwer
Antwoord verzenden naar "@jochem-brouwer , ..." So we loop over the same 66.667 ceil(200_000_000 / 3000) accounts and most clients struggle with this (after a while)
- jochem-brouwer
Antwoord verzenden naar "@jochem-brouwer , ..." So this seems to indicate this is not an IO or state problem
- Toni Wahrstätter
Replying to "Do we have a shared ..." Yeah jochem one works fine but mine are morw CL level that affect the EL. E.g. publishing a heavy payload into a different slot.
- Louis
Replying to "@jochem-brouwer , ho..." memory issue?
- jochem-brouwer
I just mentioned I dumped stuff in benchmark channel, it is in the all-el channel
- CPerezz
Reacted to "Yeah jochem one work..." with 👍
- Maria Silva
Interesting. We should definitely do this in the mainnet fork devnet as well
- danceratopz
Replying to "🩹 glamsterdam-devne..." Lighthouse OOM RCA: <https://panda-uploads-production.devops-539.workers.dev/panda/uploads/724a20/devnet-9-lighthouse-oom-rca-2026-09-04.html>
- Maria Silva
Reacted to "memory issue?" with 🤔
- danceratopz
Reacted to "I just mentioned I d..." with 👍
- Maria Silva
Does the scenario trigger a write to the account? Or just the loading and jumpdest?
- jochem-brouwer
Antwoord verzenden naar "@jochem-brouwer , ..." Only loading jumpdest :) CALLVALUE=0. Let me ping you on discord also
- Maria Silva
Reacted to "Only loading jumpdest :) CALLVALUE=0. Let me ping you on discord also" with 👍
- Justin Traglia
Has the prysm issue been fixed?
- james
https://github.com/OffchainLabs/prysm/pull/17382 it’s not merged in yet
- anyone from prysm side would be really helpful
D We'Re waiting for prysm for devnet-11 too...
- james
So it’s still not in trunk
- Enrico Del Fante (tbenr)
Replying to "Has the prysm issue ..." ASAIK it was just that they where not up to date on alpha.14 on their trunk
- jochem-brouwer
Antwoord verzenden naar "@jochem-brouwer , ..." Pinged you on discord. The similar benchmark test is: `benchmark/stateful/bloatnet/test_account_query.py::test_account_access[fork_Amsterdam-blockchain_test_stateful_engine-code_size_65536-opcode_CALL-value_sent_0-account_mode_AccountMode.EXISTING_CONTRACT_JUMPDEST-overhead_baseline_False-cache_strategy_CacheStrategy.NO_CACHE-benchmark-gas-value_200M]` There might be slight differences in the way the caller attack is setup, but the target accounts are all the same
- james
Replying to "Has the prysm issue ..." https://github.com/OffchainLabs/prysm/pull/17382 this needs to merge in to trunk
- james
Replying to "Has the prysm issue ..." Sorry I can’t talk
- Ameziane Hamlat
Reacted to "I just mentioned I dumped stuff in benchmark channel, it is in the all-el channel" with 👍
- james
Replying to "Has the prysm issue ..." Yes
- jochem-brouwer
Antwoord verzenden naar "@jochem-brouwer , ..." Maybe worth noting: this also creates a somewhat big BAL, I recall something like 1.3 MiB pulling a large block (with lots of these txs in it) from the nodes
- danceratopz
Reacted to "Yes" with 👍
- james
Replying to "Has the prysm issue ..." It updates to alpha 14
- james
Replying to "Has the prysm issue ..." But there’s still review feedback I believe
- james
Replying to "Has the prysm issue ..." Should be merged in soon
- danceratopz
🚀 glamsterdam-devnet-11 launch readiness - led by @qu0b EL client Checklist: - 7610 removed in tests-glamsterdam-devnet@v8.1.3 + tests@v20.0.2; - 8037 merge-time state-gas repayment (EIPs#12265) in tests-glamsterdam-devnet@v8.1.4
- Nico Flaig
Replying to "feedback from anyone..." does someone from pandaops do the deposit attack there, or should i do it?
- Nico Flaig
Replying to "feedback from anyone..." I can share my scripts privately
- pk910
Replying to "feedback from anyone..." please don'T do on this network. L2s want to test the happy path
- Toni Wahrstätter
How many days from genesis until gloas?
- jochem-brouwer
Antwoord verzenden naar "🚀 glamsterdam-d..." Are you here? :)
- Nico Flaig
Replying to "feedback from anyone..." ok ok 😂
- danceratopz
Reacted to "Are you here? :)" with 👋
- jochem-brouwer
Antwoord verzenden naar "🚀 glamsterdam-d..." Ok cool, was getting slighty worried :)
- james
https://github.com/OffchainLabs/prysm/pull/17440 needs to merge in develop too if you are trying builder deposits
- james
There’s a few other ones depending on the testing ..
- Justin Traglia
CL breakout: https://ethereumfoundation.zoom.us/j/89441658268?pwd=yjqf4TheEb1R7ZSuesCdOAy5tdyVk7.1
- danceratopz
🔀 Splitting into breakouts now. EL stays here. CL with @jtraglia: <https://ethereumfoundation.zoom.us/j/89441658268?pwd=yjqf4TheEb1R7ZSuesCdOAy5tdyVk7.1>
- wolovim
Reacted to "CL breakout: https://ethereumfoundation.zoom.us/j/89441658268?pwd=yjqf4TheEb1R7ZSuesCdOAy5tdyVk7.1" with 👆
- spencer
Reacted to "CL breakout: https..." with 👆
- jochem-brouwer
https://gist.github.com/jochem-brouwer/72b97452ba440da909e5da5bdf876817
- danceratopz
Ship EIP-8253 (bump nonce of zero-nonce storage accounts) with Glamsterdam? Companion to the EIP-7610 removal / BAL edge case <https://eips.ethereum.org/EIPS/eip-8253> Jochem's TL;DR gist: <https://gist.github.com/jochem-brouwer/72b97452ba440da909e5da5bdf876817>
- Pooja Ranjan
Reacted to "Ship EIP-8253 (bump nonce of zero-nonce storage accounts) with Glamsterdam? Companion to the EIP-7610 removal / BAL edge case <https://eips.ethereum.org/EIPS/eip-8253> Jochem's TL;DR gist: <https://gist.github.com/jochem-brouwer/72b97452ba440da909e5da5bdf876817>" with 👍
- CPerezz
We hit that actually with PBT
- jochem-brouwer
I have draft PR open for spec+tests in EELS https://github.com/ethereum/execution-specs/pull/3535
- FLCL (Nethermind)
May it be someone tracks such state transition? Should it be reflected in BALs?
- jochem-brouwer
This BAL change is in EIP-8253
- Iván | ethrex
-> hegota
- FLCL (Nethermind)
It seems too late
- Dragan Rakita
Reacted to "-> hegota" with 👍
- Karim T. (matkt)
Reacted to "It seems to late" with ➕
- Dragan Rakita
Reacted to "It seems to late" with 👍
- Ben Adams
Reacted to "It seems to late" with 👍
- Ben Adams
Reacted to "It seems to late" with ➕
- Dragan Rakita
It is fine to do it in hegota. Imo this would work in Glamsterdam only if all (or most) clients prefer it.
- CPerezz
Reacted to "It is fine to do it ..." with 👍
- spencer
Reacted to "It is fine to do i..." with 👍
- danceratopz
Reacted to "It is fine to do it ..." with 🙏
- jochem-brouwer
Pre-fork EIP-8253 before Glamsterdam? :) (joking)
- jochem-brouwer
Oh lol
- CPerezz
Reacted to "Oh lol" with 😂
- Iván | ethrex
Reacted to "Oh lol" with 😂
- Dragan Rakita
Reacted to "Oh lol" with 😂
- danceratopz
Reacted to "Oh lol" with 😂
- Dragan Rakita
Replying to "Oh lol" Creative thinking 😄
- Stefan Starflinger
Reacted to "It seems too late" with ➕
- Ben Adams
Reacted to "Pre-fork EIP-8253 before Glamsterdam? :) (joking)" with 👍
- jochem-brouwer
Btw, there are no storage changes into the BAL added. It is only nonce changes. I might have messed this up by saying something differently (implying storage changes to BAL) earlier
- jochem-brouwer
So we bump nonce 0->1 for 28 accounts, see: https://eips.ethereum.org/EIPS/eip-8253
- Ben Adams
Replying to "Btw, there are no storage changes into the BAL added. It is only nonce changes. I might have messed this up by saying something differently (implying storage changes to BAL) earlier" I just mean if we go either way, the worst case isn't terrible for the BAL
- danceratopz
🗂️ Close EIPs#12249 (EIP-8037 SELFDESTRUCT state-gas refill)? Declined at ACDT #94 <https://github.com/ethereum/EIPs/pull/12249> <https://forkcast.org/calls/acdt/094/>
- milen | Erigon
Sorry joined late and likely missed the discussion about EIP-8253. I would be in favour of doing it in Glamsterdam if there is bandwidth on the testing side (it is mostly more effort to set up the testing in a shadow fork), but wouldn’t mind if that gets done in Hegota either. Happy with both, slight preference to just get it done now so we don’t have to talk about this again.
- danceratopz
Reacted to "Sorry joined late an..." with 👍
- jochem-brouwer
Heeft gereageerd op "Sorry joined late ..." met 👍
- spencer
Reacted to "Sorry joined late ..." with 🙏
- jochem-brouwer
Heeft gereageerd op "Sorry joined late ..." met 🙏
- jochem-brouwer
Antwoord verzenden naar "Sorry joined late ..." Lets discuss async. If you could take a look of adding these changes in your code, we are taking care of the test side of this (not shadow fork itself but the EELS tests+spec: https://github.com/ethereum/execution-specs/pull/3535 )
- danceratopz
Reorg testing for ELs - brought up by @CPerezz <https://github.com/ethereum/pm/issues/2209#issuecomment-5567858868> <https://discord.com/channels/1359927674746835211/1538923536356352072/1538923541498695681>
- CPerezz
https://discord.com/channels/1359927674746835211/1538923536356352072/1538923541498695681
- wolovim
Friendly reminder that the next frame tx breakout call is also tmrw. Add to the agenda if you like: https://github.com/ethereum/pm/issues/2212
- Toni Wahrstätter
We wanted to work towards this reorg window: https://eips.ethereum.org/EIPS/eip-8252
- spencer
Reacted to "Friendly reminder ..." with ❤️
- Toni Wahrstätter
This might help, @CPerezz
- CPerezz
So Neth and Lukasz are for Hive IIUC. This means no other EL has any preferences I assume. So we will start building such a suite in hive most likely then. And trying to add all PBT reorg testing there as well as MPT Awesome. Thanks!
- Karim T. (matkt)
Hive seems to make sense
- CPerezz
Reacted to "Hive seems to make s..." with 👍
- CPerezz
Reacted to "This might help, @CP..." with ❤️
- CPerezz
Replying to "This might help, @CP..." Ye I know! I wanted to have perf tests for that too
- danceratopz
🌐 eth/72 txsize is ambiguous for type-3 transactions (carried over from ACDT #94) <https://github.com/ethereum/devp2p/pull/281> <https://github.com/ethereum/pm/issues/2204#issuecomment-5479074806> EIP-8070 size_i follow-up: <https://github.com/ethereum/EIPs/pull/12275> Besu fix merged: <https://github.com/besu-eth/besu/pull/11203>
- FLCL (Nethermind)
What's cool about eels is that any fixture can be run outside hive using a cli per client, if we could have genesis/payload dump from hive that might speedup reproducing the issues.
- Stefan Starflinger
- milen | Erigon
Reacted to "Lets discuss async. If you could take a look of adding these changes in your code, we are taking care of the test side of this (not shadow fork itself but the EELS tests+spec: https://github.com/ethereum/execution-specs/pull/3535 )" with 👍
- spencer
Reacted to "https://github.com..." with 🙏
- milen | Erigon
Replying to "Sorry joined late an..." Sounds good, feel free to ping if you need help with anything. I’ll try to prep a branch for it tomorrow
- danceratopz
🔍 Heads up: EIP-8037 state gas in debug traces (execution-apis#852) is on the RPC Standards Call today 15:00 UTC <https://github.com/ethereum/execution-apis/pull/852> <https://github.com/ethereum/pm/issues/2213>
- Marius Van Der Wijden (M)
I like making it a <stategas, execution > vector
- danceratopz
Reacted to "I like making it a <..." with 👍
- danceratopz
Reacted to "I like making it a <..." with 🙏
- jochem-brouwer
Antwoord verzenden naar "Sorry joined late ..." Thanks! Any test case we should include please send them to me so we directly include it in the first release of these tests. For instance the balance should not change, so things coming to mind is poking this balance, sending balance in the prior block, sending withdrawal to this account, etc etc
- jochem-brouwer
Antwoord verzenden naar "Sorry joined late ..." Or directly write them
Call summary
Targets
- •glamsterdam-devnet-11 launch: mid-to-end of week (pending Prysm alpha.14 merge) - 00:27:14
Decisions
- •EIP-8253 deferred to Hegota; rough consensus it is too late for Glamsterdam - 00:42:15
- •EIP-8037 SELFDESTRUCT state-gas refill (PR #12249) remains closed/declined per ACDT #94 - 00:45:00
- •EL reorg testing suite will be built in Hive (preferred by Geth and Besu) - 00:52:05
Highlights
- Testing Progress:
- ·glamsterdam-devnet-8: Jochem's 64KB JUMPDEST-spam knocked out 12/13 Besu nodes; Besu missed ~65% of proposals vs Nethermind 5%, Geth 0.1% - 00:05:42
- ·glamsterdam-devnet-8: Toni's worst-case blob + KZG-opening payload surfaced a Nimbus PTC voting-too-early bug; still under investigation - 00:14:00
- ·glamsterdam-devnet-9 (1000-node non-finality devnet): ~30% of network (Prysm trunk) went offline at Gloas fork; Lighthouse OOM on restart due to 4M validator keys; network not kept running - 00:17:46
- ·glamsterdam-devnet-10 ran decoupled consensus testing; glamsterdam-devnet-11 planned as happy-path fork transition devnet for L2 coordination - 00:20:42
- ·glamsterdam-devnet-11 blocked on Prysm trunk update to alpha.14 (PR #17382 not yet merged); PK configuring; 1-2 days gap planned before Gloas activation - 00:25:31
- Eip Proposals Glamsterdam:
- ·EIP-8253 (bump nonce of zero-nonce storage accounts): companion to EIP-7610 removal/BAL; rough consensus is defer to Hegota — too late for Glamsterdam - 00:29:07
- ·Clarification: EIP-8253 only adds nonce bumps (0→1) for 28 accounts to BAL, no storage changes; EELS draft PR #3535 open - 00:44:00
- El Breakout Reorg Testing:
- ·CPerezz proposing general EL reorg testing suite; Marius and Ben prefer Hive as the framework; work would not require client team effort - 00:49:08
- ·Toni notes EIP-8252 defines target reorg window; relevant to reorg test design - 00:51:00
- El Breakout Rpc Standards:
- ·eth/72 tx size ambiguity for Type 3 (blob) transactions: Stefan's devp2p PR #281 addresses it; most clients already fixed; async review welcome - 00:54:01
- ·EIP-8037 state gas in debug traces (execution-apis PR #852) on today's RPC Standards Call 15:00 UTC; Marius prefers a vector format extensible to future gas types - 00:56:21
Action Items
- •danceratopz / pk910 - Bring JUMPDEST-spam attack expressiblity in EEST to tomorrow's benchmarking call - 00:16:11
- •All EL teams - EIP-8253 Glamsterdam-vs-Hegota decision deferred to Thursday's ACDE; client teams review async - 00:43:30
Key decisions
EIP-8253 deferred to Hegota; rough consensus it is too late for Glamsterdam
SFIThe proposal was deferred to the Hegota upgrade because it was deemed too late for inclusion in Glamsterdam.EIP-8037 SELFDESTRUCT state-gas refill (PR #12249) remains closed/declined per ACDT #94
DFIReaffirmed the previous decision to decline the proposal.EL reorg testing suite will be built in Hive (preferred by Geth and Besu)
Consensus reached on using Hive as the framework for the general Execution Layer reorg testing suite.
EIPs discussed
AI Disclaimer: Some content or metadata on EIPsInsight may be AI-inferred or automatically compiled. If you find any discrepancy, please contact us at dev@avarch.org.