1RPC lite

About

This project is a minimized 1RPC application which relays JSON-RPC requests.

In addition to normal relays, it sanitizes your JSON-RPC by masking out the metadata (like IP address, User-Agent) carried with HTTP requests, and breaks down special eth_calls which may leak your wallets relationship to ensure zero-tracking.

Full attestation

Attestation on Software Build

Leveraging the attestable-build-tool, we achieve a reproducible build and result in the same MREnclave. If you're interested in the whole compilation process, you can download the source code and trigger an attestable build by yourself.

You can view the latest attestation report at its release page.

Attestation on Hardware

Currently 1RPC-lite is hosted in Azure Cloud and uses Intel DCAP to complete the TEE attestation, ensuring that the hardware execution environment and the running code are matched as expected.

In Automata Testnet, we implement an on-chain DCAP quote verification, and you can find the current attestation it Automata Testnet.

How to run

1. TLS cert & key

If you are going to run demo with https, plz prepare domain.key and domain.crt.

OR you just touch empty files at above locations for local test purpose.

> touch domain.key
> touch domain.crt

2. Config & Run

1RPC lite app can run in 2 modes:

relay mode: relay jsonrpc requests, no protection details conveyed
demo mode: not relay websocket jsonrpc requests, but instead send protection details via websocket channel

both modes load routes from static json config file (example in following section)
make sure no duplicate keys in routes
wss routes take no effect in demo mode

Run in relay mode

edit config-relay-example.json

{
    "eth": "http://127.0.0.1:8545", // <- replace with your prefered endpoint
    "dot": "wss://rpc.polkadot.io", // etc
}

> RELEASE=1 ./scripts/1rpc.sh -r config-relay-example.json -d false --tls domain

(--tls domain is to lookup domain.key and domain.crt)

You can add env SGX=1 to build&run the SGX version, before that you need to setup SGX environment. You can find the installation guides for Intel SGX software on the 01.org website. Besides, you need to prepare an account as well, to submit the dcap attestation in Automata Testnet.

Test out:

make http jsonrpc requests to http://127.0.0.1:3400/eth/$token
or wscat -c ws://127.0.0.1:3400/dot, then make jsonrpc requests

Run in demo mode

edit config-demo-example.json

{
    "eth": "http://127.0.0.1:8545" // <- replace with your prefered endpoint
}

> RELEASE=1 ./scripts/1rpc.sh -r config-demo-example.json --tls domain