diff options
Diffstat (limited to 'internal/relay')
| -rw-r--r-- | internal/relay/relay.go | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/internal/relay/relay.go b/internal/relay/relay.go index 9cd0366..9a17fab 100644 --- a/internal/relay/relay.go +++ b/internal/relay/relay.go @@ -8,7 +8,18 @@ import ( "nymdrop/internal/nym" ) -const maxPayloadBytes = 10 * 1024 * 1024 // 10 MB +// Two base64 layers stack between the raw file and the wire: the client +// base64-encodes the file into the plaintext before encrypting (see +// static/crypto.js, ~4/3 inflation), then nym.Client.Send base64-encodes +// the whole ciphertext again to embed it in the JSON message sent to the +// local nym-client over its control WebSocket (~4/3 again). The combined +// ~1.78x inflation is bounded above by nym-client's own hardcoded 16MB +// WebSocket message limit, not by anything in this codebase, so this +// buffer (and the nginx/http-layer cap) must stay well under 16MB / 1.78 +// once the second layer is applied. 11MB here keeps the second-layer +// base64 (~14.7MB) with real margin below the 16MB nym-client ceiling, +// which works out to a safe raw file size of roughly 8MB, not 10MB. +const maxPayloadBytes = 11 * 1024 * 1024 // 11 MB wire (first base64 layer only) // Relay receives ciphertext and forwards it through Nym. Nothing is written to disk. type Relay struct { |