feat: backpressure, stable load

Author: allnil

.github/workflows/ci.yml

@@ -10,6 +10,9 @@ on:
 
 env:
   CARGO_TERM_COLOR: always
+  CARGO_SORT_VERSION: "2.0.1"
+  CARGO_DENY_VERSION: "0.19.0"
+  CARGO_AUDIT_VERSION: "0.22.1"
 
 permissions:
   contents: read
@@ -62,10 +65,10 @@ jobs:
       - name: Install cargo-sort
         uses: taiki-e/install-action@v2
         with:
-          tool: cargo-sort
+          tool: cargo-sort@${{ env.CARGO_SORT_VERSION }}
 
       - name: sort-check
-        run: cargo sort --workspace --check
+        run: make sort-check
 
   # ----------------------------------------------------------------------------
   # Clippy
@@ -151,12 +154,12 @@ jobs:
       - name: Install cargo-deny
         uses: taiki-e/install-action@v2
         with:
-          tool: cargo-deny
+          tool: cargo-deny@${{ env.CARGO_DENY_VERSION }}
 
       - uses: Swatinem/rust-cache@v2
 
       - name: cargo deny
-        run: cargo deny check
+        run: make deny
 
   # ----------------------------------------------------------------------------
   # Security: cargo-audit
@@ -174,9 +177,9 @@ jobs:
       - name: Install cargo-audit
         uses: taiki-e/install-action@v2
         with:
-          tool: cargo-audit
+          tool: cargo-audit@${{ env.CARGO_AUDIT_VERSION }}
 
       - uses: Swatinem/rust-cache@v2
 
       - name: cargo audit
-        run: cargo audit --deny warnings --ignore RUSTSEC-2025-0055 --ignore RUSTSEC-2024-0388 --ignore RUSTSEC-2024-0436
+        run: make audit

Cargo.lock

@@ -91,6 +91,7 @@ serde = { version = "1.0", features = ["derive"], default-features = false }
 serde_json = "1.0"
 thiserror = "2.0"
 tokio = { version = "1.46.0", features = ["macros", "rt-multi-thread", "time"] }
+tower = "0.5"
 tracing = "0.1.41"
 
 [features]
@@ -156,6 +157,7 @@ serde = { workspace = true }
 serde_json = { workspace = true }
 thiserror = { workspace = true }
 tokio = { workspace = true }
+tower = { workspace = true }
 tracing = { workspace = true }
 
 [dev-dependencies]

Cargo.toml

@@ -17,7 +17,8 @@ DOCKER_BUILDX_OUTPUT ?= type=oci,dest=dist/load-reth-multiarch.tar
 # Git metadata
 GIT_TAG := $(shell (git describe --exact-match --tags 2>/dev/null) || echo sha-$$(git rev-parse --short=12 HEAD))
 GIT_SHA := $(shell git rev-parse --short=12 HEAD 2>/dev/null || echo "unknown")
-AUDIT_IGNORES ?= RUSTSEC-2025-0055 RUSTSEC-2024-0388 RUSTSEC-2024-0436
+AUDIT_IGNORES ?= RUSTSEC-2025-0055 RUSTSEC-2024-0388 RUSTSEC-2024-0436 RUSTSEC-2025-0137 RUSTSEC-2025-0141 RUSTSEC-2026-0002 RUSTSEC-2026-0007 RUSTSEC-2026-0008 RUSTSEC-2026-0009
+CARGO_SORT_CMD ?= cargo sort --workspace
 
 AUDIT_FLAGS := --deny warnings
 ifneq ($(strip $(AUDIT_IGNORES)),)
@@ -166,11 +167,11 @@ clippy: ## Run clippy lints
 
 .PHONY: sort
 sort: ## Sort dependencies in Cargo.toml
-	cargo sort --workspace
+	$(CARGO_SORT_CMD)
 
 .PHONY: sort-check
 sort-check: ## Check if dependencies are sorted
-	cargo sort --workspace --check
+	$(CARGO_SORT_CMD) --check
 
 .PHONY: docs
 docs: ## Build documentation with warnings as errors

Makefile

@@ -9,6 +9,18 @@ ignore = [
     # https://rustsec.org/advisories/RUSTSEC-2024-0436
     # paste crate unmaintained, comes from reth dependencies - no fix available yet
     "RUSTSEC-2024-0436",
+    # https://rustsec.org/advisories/RUSTSEC-2025-0137
+    # ruint unsoundness comes via upstream reth/alloy dependency graph; awaiting upstream bump
+    "RUSTSEC-2025-0137",
+    # https://rustsec.org/advisories/RUSTSEC-2025-0141
+    # bincode marked unmaintained; transitive via upstream reth stack, no direct safe replacement here yet
+    "RUSTSEC-2025-0141",
+    # https://rustsec.org/advisories/RUSTSEC-2026-0009
+    # time RFC2822 parser DoS; transitive in upstream deps; awaiting patched transitive upgrade
+    "RUSTSEC-2026-0009",
+    # https://rustsec.org/advisories/RUSTSEC-2026-0007
+    # bytes integer overflow; transitive via upstream reth networking deps, awaiting upstream bump
+    "RUSTSEC-2026-0007",
 ]
 
 [bans]

deny.toml

@@ -6,6 +6,7 @@
 //! - keep a hook surface for future fork/attribute guards.
 
 use std::{
+    fmt,
     sync::Arc,
     time::{Instant, SystemTime, UNIX_EPOCH},
 };
@@ -35,7 +36,6 @@ use reth_rpc_api::EngineApiServer;
 use reth_rpc_engine_api::{EngineApi, EngineApiError, EngineCapabilities};
 use reth_transaction_pool::TransactionPool;
 use tracing::trace;
-use std::fmt;
 
 use crate::{
     chainspec::{LoadChainSpec, LOAD_MAX_BLOB_COUNT},
@@ -115,12 +115,7 @@ where
         let is_syncing = Arc::new(move || network.is_syncing());
 
         // Wrap with Load-specific behaviour.
-        Ok(LoadEngineApi::new(
-            inner,
-            ctx.node.pool().clone(),
-            engine_metrics,
-            is_syncing,
-        ))
+        Ok(LoadEngineApi::new(inner, ctx.node.pool().clone(), engine_metrics, is_syncing))
     }
 }
 

src/engine/rpc.rs

@@ -116,8 +116,7 @@ where
         &self,
         payload: LoadExecutionData,
     ) -> Result<SealedBlock<Self::Block>, NewPayloadError> {
-        self.ensure_load_payload_invariants(&payload)
-            .map_err(NewPayloadError::other)?;
+        self.ensure_load_payload_invariants(&payload).map_err(NewPayloadError::other)?;
         self.inner.ensure_well_formed_payload(payload.into()).map_err(Into::into)
     }
 }

src/engine/validator.rs

@@ -22,7 +22,7 @@ use reth_node_api::{FullNodeComponents, PrimitivesTy};
 use reth_node_builder::{
     components::{BasicPayloadServiceBuilder, ComponentsBuilder, NetworkBuilder, NodeComponents},
     node::FullNodeTypes as FullNodeTypesAlias,
-    rpc::{BasicEngineValidatorBuilder, Identity as RpcIdentity, RpcAddOns},
+    rpc::{BasicEngineValidatorBuilder, RpcAddOns},
     BuilderContext, Node, NodeAdapter, NodeComponentsBuilder,
 };
 use reth_node_ethereum::node::EthereumEthApiBuilder;
@@ -42,6 +42,7 @@ use crate::{
     evm::{LoadEvmConfig, LoadExecutorBuilder},
     pool::LoadPoolBuilder,
     primitives::LoadPrimitives,
+    rpc::backpressure::LoadRpcBackpressureLayer,
     version::load_client_version_string,
 };
 
@@ -159,7 +160,7 @@ where
         LoadEngineValidatorBuilder,
         LoadEngineApiBuilder<LoadEngineValidatorBuilder>,
         BasicEngineValidatorBuilder<LoadEngineValidatorBuilder>,
-        RpcIdentity,
+        LoadRpcBackpressureLayer,
     >;
 
     fn components_builder(&self) -> Self::ComponentsBuilder {
@@ -184,7 +185,7 @@ where
             LoadEngineValidatorBuilder::default(),
             LoadEngineApiBuilder::<LoadEngineValidatorBuilder>::default(),
             BasicEngineValidatorBuilder::new(LoadEngineValidatorBuilder::default()),
-            RpcIdentity::default(),
+            LoadRpcBackpressureLayer::from_env(),
         )
     }
 }