penumbra
penumbra copied to clipboard
Disable public exposure of tendermint RPC
Blocked on https://github.com/penumbra-zone/penumbra/issues/1727
The relayer implementation for Penumbra uses the Tendermint RPC endpoint directly. It's possible that post IBC reorg (#2379) we'll have clean protos everywhere, and we can revisit the use of TM RPC in the relayer, but for now, we should plan to continue to expose this service.
Recently discussed the Hermes implementation (which we're now using instead of rly
for testnet relaying) with @avahowell and she confirmed that Hermes also requires direct access to the CometBFT RPC, in addition to access to pd's gRPC service.