The number of requests/second @infura_io must handle is insane. Every active Metamask user is sending them ~25 eth_getBlockByNumber calls a minute. If 50% of Metamask users have the extension enabled thats 200k requests/second right there.
-
Show this thread
-
The fact that Infura is used by basically every wallet that doesn't sync the full chain is interesting.
@infura_io and@metamask_io's web3 provider-engine (http://github.com/MetaMask/provider-engine …) are doing a lot of the legwork in fixing the (IMO) incorrect abstractions web3 assumes.2 replies 1 retweet 6 likesShow this thread -
From a business perspective, I wouldn't be surprised if
@ConsenSys ends up making a lot of money from Infura in the future. Lots of value in being the defacto pipe that a majority of traffic is piped through.3 replies 3 retweets 7 likesShow this thread -
Infura could be to Consensys what Onavo VPN is to FB: https://en.wikipedia.org/wiki/Onavo (not making any privacy / ethical claims here, just pointing out the value of being in that position)
1 reply 0 retweets 3 likesShow this thread -
Of course this a bit different with blockchain since a lot is public. Still, you could get private dapp adoption insights by tracking IPFS reads and eth_call usage both of which are not public
1 reply 1 retweet 1 likeShow this thread -
If I were
@infura_io I would announce way more aggressive rate limiting unless you have an api key ASAP. From an engineering, security, and business perspective you want to know who is sending what traffic. Figure it out ASAP because you'll need a long deprecation period.1 reply 0 retweets 3 likesShow this thread -
Even something like Reddit's API would work fine. For Reddit, you get rate limited after ONE api request (lol) until you set your user agent to something unique and identifiable.
1 reply 0 retweets 0 likesShow this thread -
Palatable transition path: 1. Announce users have 3 months to add a user agent 2. Three months later just make offending requests really slow 3. Start 429ing a small % a month after that. 4. Actually fully enforce after one more month
3 replies 0 retweets 1 likeShow this thread -
Replying to @backus
Could the web3 providers offload that onto users? Somethieng like requiring users to have their own API key.
1 reply 0 retweets 0 likes
Yeah that is way trickier for things like Metamask where they can't exactly ship the same api key to every user. Basically I'm suggesting user agents as an easier way to know something about unauth'd users while also focusing on api keys long term
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.