Developer Hardens Kademlia DHT Against Eclipse Attacks With Subnet Diversity Feature

A developer working on py-libp2p spent the week focused on securing the Kademlia DHT implementation against Eclipse attacks, where an attacker floods a node's routing table with malicious peers to isolate it from the real network. A pull request adding 226 lines of logic was opened to enforce IP subnet diversity in k-buckets, making it significantly harder for attackers to dominate peer slots using nodes from a single cloud subnet. The team also evaluated and ultimately dropped randomized lookup selection as a defense mechanism, opting instead for stronger bucket management. Separately, two race conditions causing flaky test failures in CI were tracked down and fixed — one in a timed cache expiry test and another in a Gossipsub peer filter test. The week also included routine automated maintenance on the developer's Neovim configuration, keeping the tooling environment up to date.