Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add the option on path creator to specify the incoming node or channel on blinded path #9127

Open
wants to merge 7 commits into
base: master
Choose a base branch
from

Conversation

MPins
Copy link
Contributor

@MPins MPins commented Sep 21, 2024

Fixes #8993

Change Description

Add the option on path creator to specify the incoming node setting a list of penultimates nodes

Steps to Test

lncli addinvoice --blind --blinded_path_penultimate_node "node_id" amount
lncli addinvoice --blind --blinded_path_penultimate_node "node_id1" --blinded_path_penultimate_node "node_id2" amount

Pull Request Checklist

Testing

  • Your PR passes all CI checks.
  • Tests covering the positive and negative (error paths) are included.
  • Bug fixes contain tests triggering the bug to prevent regressions.

Code Style and Documentation

📝 Please see our Contribution Guidelines for further guidance.

@MPins
Copy link
Contributor Author

MPins commented Sep 21, 2024

Hello @ellemouton if you think I'm on the right way I can add the option to choose a channel also.

@MPins MPins changed the title Add the option on path creator to specify the incoming node Add the option on path creator to specify the incoming node on blinded path Sep 21, 2024
@MPins
Copy link
Contributor Author

MPins commented Sep 22, 2024

Maybe change the name to "incoming_node" is a better idea! But I'll wait for others opinion also.

@ellemouton
Copy link
Collaborator

thanks @MPins - in tokyo at the moment for the LN summit so will take a look at this a bit later this week or next week

@ziggie1984
Copy link
Collaborator

I think it makes sense to just specify the incoming channel, I don't see a lot of use cases for the whole blinded route, but maybe we already prepare the code so that it will be easy to just upgrade to the whole blinded path if it has benefits.

Copy link
Collaborator

@ziggie1984 ziggie1984 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for your first contribution 🎉

Please squash all commits related to the lnrpc change into one.

Moreover while reviewing this PR I found out that we have a bug in your probabiliy calculation. We basically should have the prob. of full certainty for the last hop however we need to change the logic in our probability estimator which still seems to not account for the blinded usecase see here (only when from == Self do we set the full local probability, that needs to now be inverted for the last hop as well):

func (m *MissionControl) GetProbability(fromNode, toNode route.Vertex,
amt lnwire.MilliSatoshi, capacity btcutil.Amount) float64 {
m.mu.Lock()
defer m.mu.Unlock()
now := m.cfg.clock.Now()
results, _ := m.state.getLastPairResult(fromNode)
// Use a distinct probability estimation function for local channels.
if fromNode == m.cfg.selfNode {
return m.estimator.LocalPairProbability(now, results, toNode)
}
return m.estimator.PairProbability(
now, results, toNode, amt, capacity,
)
}

@@ -3894,6 +3894,12 @@ message BlindedPathConfig {
blinded paths.
*/
repeated bytes node_omission_list = 4;

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

squash into first commit because it belongs to the lnrpc change.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I did just one commit to all lnrpc changes

Copy link
Contributor Author

@MPins MPins Oct 12, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

And another one with lnrpc/lightning.pb.go . As it is a file created with make rpc I'm not sure if I should commit this change.

routing/pathfind.go Show resolved Hide resolved
routing/pathfind.go Outdated Show resolved Hide resolved
cmd/commands/cmd_invoice.go Outdated Show resolved Hide resolved
cmd/commands/cmd_invoice.go Outdated Show resolved Hide resolved
@MPins
Copy link
Contributor Author

MPins commented Oct 4, 2024

I think it makes sense to just specify the incoming channel, I don't see a lot of use cases for the whole blinded route, but maybe we already prepare the code so that it will be easy to just upgrade to the whole blinded path if it has benefits.

In most cases it would be sufficient to specify the node, the channel must be specified in cases where there is more than one channel with the same node. Of course, specifying the channel covers both use cases. I'm not sure if we should keep both options for the user, perhaps it would be more intuitive to specify the income node for most users.

@ziggie1984
Copy link
Collaborator

I prefer the channel, because than you have more control rather than the pubkey. But at the end not sure if its really worth it to treat different channels to the same peer differently because we have non-strict forwarding. So probably both options are ok ...

@MPins
Copy link
Contributor Author

MPins commented Oct 7, 2024

Thank you for your first contribution 🎉

Please squash all commits related to the lnrpc change into one.

Moreover while reviewing this PR I found out that we have a bug in your probabiliy calculation. We basically should have the prob. of full certainty for the last hop however we need to change the logic in our probability estimator which still seems to not account for the blinded usecase see here (only when from == Self do we set the full local probability, that needs to now be inverted for the last hop as well):

func (m *MissionControl) GetProbability(fromNode, toNode route.Vertex,
amt lnwire.MilliSatoshi, capacity btcutil.Amount) float64 {
m.mu.Lock()
defer m.mu.Unlock()
now := m.cfg.clock.Now()
results, _ := m.state.getLastPairResult(fromNode)
// Use a distinct probability estimation function for local channels.
if fromNode == m.cfg.selfNode {
return m.estimator.LocalPairProbability(now, results, toNode)
}
return m.estimator.PairProbability(
now, results, toNode, amt, capacity,
)
}

Thank you for your carefully revision. I'll be working on it some time on the following days. About the probability, I invest some time trying to understanding it, but I didn't get the bug on it! From my understanding, probability is about sending the payment, right? How the payment node would even know that we are choosing the income channel/node? I'm probably missing something, I would appreciate if you give me directions to expand my understanding.

@MPins
Copy link
Contributor Author

MPins commented Oct 7, 2024

I prefer the channel, because than you have more control rather than the pubkey. But at the end not sure if its really worth it to treat different channels to the same peer differently because we have non-strict forwarding. So probably both options are ok ...

I think we can move forward with both options, but in my opinion they should be exclusive. I mean, if the channel is chosen, the node cannot be chosen. (just to avoid redundant info)

@ziggie1984
Copy link
Collaborator

So my initial idea was, that we can know the probability of the last channel in a blinded path with very high accuracy because its our own channel and we know the liquidity distribution when creating the blinded path. However looking into the codebase I think we should keep it as is, we do allow MPP payments for blinded paths so the amount can be splitted among the incoming channels in general. Moreover when we specify the incoming channel to receive on (via this PR) we already made the decision that this is the right channel to receive on the full amount, so maybe we can keep the probability estimation of the last hop/channel as is. Given the fact that we include all routes with a minimum route prob. of 1% we are good as is I think.

@MPins
Copy link
Contributor Author

MPins commented Oct 8, 2024

So my initial idea was, that we can know the probability of the last channel in a blinded path with very high accuracy because its our own channel and we know the liquidity distribution when creating the blinded path. However looking into the codebase I think we should keep it as is, we do allow MPP payments for blinded paths so the amount can be splitted among the incoming channels in general. Moreover when we specify the incoming channel to receive on (via this PR) we already made the decision that this is the right channel to receive on the full amount, so maybe we can keep the probability estimation of the last hop/channel as is. Given the fact that we include all routes with a minimum route prob. of 1% we are good as is I think.

Got it ... besides that, as it is blinded I can't think a way of considering that it is our own node without breaking the main reason for using a blinded path, that is not revealing our own node on a invoice.

@ziggie1984
Copy link
Collaborator

Got it ... besides that, as it is blinded I can't think a way of considering that it is our own node without breaking the main reason for using a blinded path, that is not revealing our own node on a invoice.

Hmm not sure what you mean, but I was just referring to the creator of the blinded path taking the incoming channel distribution directly into account without really relying on the MC data. The path would still be blinded for the sender so the sender would just have a sorted list of blinded paths in the bolt11 invoice.

@MPins
Copy link
Contributor Author

MPins commented Oct 8, 2024

Got it ... besides that, as it is blinded I can't think a way of considering that it is our own node without breaking the main reason for using a blinded path, that is not revealing our own node on a invoice.

Hmm not sure what you mean, but I was just referring to the creator of the blinded path taking the incoming channel distribution directly into account without really relying on the MC data. The path would still be blinded for the sender so the sender would just have a sorted list of blinded paths in the bolt11 invoice.

Never mind ... I was thinking that the GetProbability func would be called when the payment is being processed by the sender.

@MPins
Copy link
Contributor Author

MPins commented Oct 8, 2024

So my initial idea was, that we can know the probability of the last channel in a blinded path with very high accuracy because its our own channel and we know the liquidity distribution when creating the blinded path. However looking into the codebase I think we should keep it as is, we do allow MPP payments for blinded paths so the amount can be splitted among the incoming channels in general. Moreover when we specify the incoming channel to receive on (via this PR) we already made the decision that this is the right channel to receive on the full amount, so maybe we can keep the probability estimation of the last hop/channel as is. Given the fact that we include all routes with a minimum route prob. of 1% we are good as is I think.

I just saw that it is called by FindBlindedPaths ... Thank you, I have a better understanding of the whole process now.

I think you right ... maybe it should be changed ... not sure if it should be included in this PR or maybe on a specific one for that.

@@ -35,7 +35,7 @@ require (
github.com/lightningnetwork/lightning-onion v1.2.1-0.20240712235311-98bd56499dfb
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Those files were changed when I did go get -u github.com/lightningnetwork/lnd/fn to update the Fn to use isEmpty function once #9159 is merged

@saubyk
Copy link
Collaborator

saubyk commented Oct 13, 2024

Have a basic question here.
The problem statement in the linked issue is regarding specifying an incoming channel...

  • to have better control over payment success probability
  • to better control the liquidity distribution available on the node

So why are we then giving the user the control of selecting a node in the cli, instead of directly specifying a channel?
I believe the user should only specify the channel not the node (which I find confusing)

@MPins
Copy link
Contributor Author

MPins commented Oct 13, 2024

Have a basic question here. The problem statement in the linked issue is regarding specifying an incoming channel...

  • to have better control over payment success probability
  • to better control the liquidity distribution available on the node

So why are we then giving the user the control of selecting a node in the cli, instead of directly specifying a channel? I believe the user should only specify the channel not the node (which I find confusing)

The idea to have the option to specify the node instead of the channel is because in the most cases it would be enough and from the node runner perspective it would be more intuitive specifying just the income node.

@MPins MPins changed the title Add the option on path creator to specify the incoming node on blinded path Add the option on path creator to specify the incoming node or channel on blinded path Oct 13, 2024
@ziggie1984
Copy link
Collaborator

So why are we then giving the user the control of selecting a node in the cli, instead of directly specifying a channel?
I believe the user should only specify the channel not the node (which I find confusing)

Good question, I also tend to only support the incoming channel id why:

  1. When creating the blinded path we do not create a Unified Edge meaning that we do NOT take all the different policies for all the channels with the same peer into account. Moreover we cannot be sure that all policies are the same, other implementations iirc can have different policies for different channels, therefore I recommend only using the channel ID here.
  2. Although the lightning network supports non-strict forwarding which means the forwarder can basically select another channel if he wants to, but as mentioned before, we are not unifying the edges to create the worst case policy to the last node. So I think we should stick to the incoming channel id here and should not allow the node id.

@ziggie1984
Copy link
Collaborator

Imagine your peer has 2 channels with you and different policies, now when creating the blinded path and using the nodeid, you cannot control the particular channel and the sender will probably use the route with the better constraints. We already have something similar when sending a payment where we can select the outgoing channel. We should prob. stick to this form.

@MPins
Copy link
Contributor Author

MPins commented Oct 13, 2024

I think that

Imagine your peer has 2 channels with you and different policies, now when creating the blinded path and using the nodeid, you cannot control the particular channel and the sender will probably use the route with the better constraints. We already have something similar when sending a payment where we can select the outgoing channel. We should prob. stick to this form.

When sending payment you can also choose the last hop (penultimate node in the path) to route through for the payment, but it is other use case. So I think you both are right, I'm going to take the node option out.

@ziggie1984
Copy link
Collaborator

Good observation that we also allow the last hop in the payment flow, but LND does unify the edges in the sending flow and selects the most expensive policy that's why it makes sense to have this last hop setting.

@MPins
Copy link
Contributor Author

MPins commented Oct 13, 2024

Good observation that we also allow the last hop in the payment flow, but LND does unify the edges in the sending flow and selects the most expensive policy that's why it makes sense to have this last hop setting.

Perfect ... I'm going to take the node option out. Thank you @saubyk for starting this exchange of ideas.

@saubyk
Copy link
Collaborator

saubyk commented Oct 13, 2024

Good observation that we also allow the last hop in the payment flow, but LND does unify the edges in the sending flow and selects the most expensive policy that's why it makes sense to have this last hop setting.

Perfect ... I'm going to take the node option out. Thank you @saubyk for starting this exchange of ideas.

Thanks. Not to add the confusion, but I do understand the logic of selecting the node from a UX standpoint and especially when you imagine a user doing it in a UI. Selecting a pub key (with an alias) is much easier than selecting a channel ID. But I think that problem can be addressed at the application level, where the UI can establish that node-channel linkage and present a user friendly way for the user to make a selection.

@ellemouton
Copy link
Collaborator

I prefer the channel, because than you have more control rather than the pubkey.

The problem is that you dont actually every have this control due to non-strict forwarding. At the end of the day, the peer may choose any channel to fwd on as long as the peer on the other end is the same peer.

Regarding the impl here and if we only want to specify final hop or list of hops, I think things should be made general enough for both:

  • so if user specifies 1 peer, then LND takes that as a fixed final hop and uses its current logic to build on that given the other config values
  • use can specify a list of hops and LND will just do the same thing as above.

@MPins
Copy link
Contributor Author

MPins commented Oct 16, 2024

  • use can specify a list of hops and LND will just do the same thing as above.

The way it is done here the user can specify the last hop many times (peers or channels, not both). If I understand you correctly it should be kept this way. Right?

@ziggie1984
Copy link
Collaborator

ziggie1984 commented Oct 16, 2024

@ellemouton what's your take on this, we cannot really know whether peers have a universal policy to us?

Imagine your peer has 2 channels with you and different policies, now when creating the blinded path and using the nodeid, you cannot control the particular channel and the sender will probably use the route with the better constraints. We already have something similar when sending a payment where we can select the outgoing channel. We should prob. stick to this form.

@ellemouton
Copy link
Collaborator

@ziggie1984 - yes that makes sense but my point is that nothing stops the peer from in any case just choosing the channel they want to choose. If you peer has channel X and Y with you, and you tell them to use channel X, nothing stops them from using channel Y

@ziggie1984
Copy link
Collaborator

yes that makes sense but my point is that nothing stops the peer from in any case just choosing the channel they want to choose. If you peer has channel X and Y with you, and you tell them to use channel X, nothing stops them from using channel Y

Correct that's for the perspective of the forwarding node, but let's look at it from the receiving node:

You have channel X and Y, both have different Policies, now you create your invoice specifying the last hop via the nodeid, you get 2 blinded paths most likely (or more). The sender will probably select the path with the best constraints, hence the receiver lost a bit of control while specifying the invoice. If he could have specified the channelid he would not put both paths into the invoice.

I agree with you statement when policies are equal the sender can choose both channel X or channel Y and specifying the nodeid here makes sense. However when the policies are different it makes sense for the receiver to have more control specifying the channelid not the nodeid. Thats why I proposed only going with the chanid, which is basically valid for both options, rather than going with only nodeid, or both (which increases complexity).

@ziggie1984
Copy link
Collaborator

Do you favour the approach of providing a whole path not just the last channel ? Could not think of a use case where we would like to specify the whole path ?

@MPins
Copy link
Contributor Author

MPins commented Oct 16, 2024

  • use can specify a list of hops and LND will just do the same thing as above.

Do you mean a list of final hops or all the blinded path? As @ziggie1984 said I can't imagine also a use case for that. 🤔

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Route Blinding: allow path creator to specify incoming channel
4 participants