node/ccq: allow guardian peers

node/pkg/p2p/ccq_p2p.go

@@ -44,11 +44,13 @@ type ccqP2p struct {
 	th_resp       *pubsub.Topic
 	sub           *pubsub.Subscription
 	allowedPeers  map[string]struct{}
+	p2pComponents *Components
 }
 
 func newCcqRunP2p(
 	logger *zap.Logger,
 	allowedPeersStr string,
+	components *Components,
 ) *ccqP2p {
 	l := logger.With(zap.String("component", "ccqp2p"))
 	allowedPeers := make(map[string]struct{})
@@ -62,6 +64,7 @@ func newCcqRunP2p(
 	return &ccqP2p{
 		logger:        l,
 		allowedPeers:  allowedPeers,
+		p2pComponents: components,
 	}
 }
 
@@ -103,6 +106,13 @@ func (ccq *ccqP2p) run(
 			if _, found := ccq.allowedPeers[peerID.String()]; found {
 				return true
 			}
+			ccq.p2pComponents.ProtectedHostByGuardianKeyLock.Lock()
+			defer ccq.p2pComponents.ProtectedHostByGuardianKeyLock.Unlock()
+			for _, guardianPeerID := range ccq.p2pComponents.ProtectedHostByGuardianKey {
+				if peerID == guardianPeerID {
+					return true
+				}
+			}
 			ccq.logger.Info("Dropping subscribe attempt from unknown peer", zap.String("peerID", peerID.String()))
 			return false
 		}))

node/pkg/p2p/p2p.go

@@ -356,7 +356,7 @@ func Run(
 
 		if ccqEnabled {
 			ccqErrC := make(chan error)
-			ccq := newCcqRunP2p(logger, ccqAllowedPeers)
+			ccq := newCcqRunP2p(logger, ccqAllowedPeers, components)
 			if err := ccq.run(ctx, priv, gk, networkID, ccqBootstrapPeers, ccqPort, signedQueryReqC, queryResponseReadC, ccqErrC); err != nil {
 				return fmt.Errorf("failed to start p2p for CCQ: %w", err)
 			}