rainbow ships with some implicit defaults that can be adjusted via env variables below.
Comma-separated list of path gateway hostnames that will serve both trustless and deserialized response types.
Example: passing ipfs.io will enable deserialized handler for flat
path gateway
requests with the Host header set to ipfs.io.
Default: 127.0.0.1
Comma-separated list of subdomain gateway domains for website hosting with Origin-isolation per content root.
Example: passing dweb.link will enable handler for Origin-isolated
subdomain gateway
requests with the Host header with subdomain values matching
*.ipfs.dweb.link or *.ipns.dweb.link.
Default: localhost
Specifies trustless-only hostnames.
Comma-separated list of trustless gateway
domains, where unverified website asset hosting and deserialized responses is
disabled, and response types requested via ?format= and Accept HTTP header are limited to
verifiable content types:
NOTE: This setting is applied on top of everything else, to ensure
trustless domains can't be used for phishing or direct hotlinking and hosting of third-party content. Hostnames that are passed to both RAINBOW_GATEWAY_DOMAINS and RAINBOW_TRUSTLESS_GATEWAY_DOMAINS will work only as trustless gateways.
Example: passing trustless-gateway.link will ensure only verifiable content types are supported
when request comes with the Host header set to trustless-gateway.link.
Default: none (Host is ignored and gateway at 127.0.0.1 supports both deserialized and verifiable response types)
Directory for persistent data (keys, blocks, denylists)
Default: not set (uses the current directory)
The interval at which the garbage collector will be called. This is given as a string that corresponds to the duration of the interval. Set 0 to disable.
Default: 60m
The threshold of how much free space one wants to always have available on disk. This is used with the periodic garbage collector.
When the periodic GC runs, it checks for the total and available space on disk. If the available space is larger than the threshold, the GC is not called. Otherwise, the GC is asked to remove how many bytes necessary such that the threshold of available space on disk is met.
Default: 0.3 (always keep 30% of the disk available)
When set, it defines the upper bound limit (in ms) of how long a /ipns/{id}
lookup result will be cached and read from cache before checking for updates.
The limit is applied to everything under the /ipns/ namespace, and allows to cap both
the Time-To-Live (TTL)
of IPNS Records
and the TTL of DNS TXT records
with DNSLink.
Default: No upper bound, TTL from IPNS Record or TTL from DNSLink used as-is.
A comma-separated list of multiaddresses of peers to stay connected to.
Tip
If RAINBOW_SEED is set and /p2p/rainbow-seed/N value is found here, Rainbow
will replace it with a valid /p2p/ for a peer ID generated from same seed
and index N. This is useful when RAINBOW_SEED_PEERING can't be used,
or when peer routing should be skipped and specific address should be used.
Default: not set (no peering)
Base58 seed to derive PeerID from. Can be generated with rainbow gen-seed.
If set, requires RAINBOW_SEED_INDEX to be set as well.
Default: not set
Index to derivate the PeerID identity from RAINBOW_SEED.
Default: not set
Control the type of Amino DHT client used for for routing. Options are accelerated, standard and off.
Default: accelerated
HTTP servers with /routing/v1 endpoints to use for delegated routing (comma-separated).
Default: https://cid.contact
DNS-over-HTTPS servers to use for resolving DNSLink on specified TLDs (comma-separated map: TLD:URL,TLD2:URL2).
It is possible to override OS resolver by passing root: . : catch-URL.
Default: eth. : https://resolver.cloudflare-eth.com/dns-query, crypto. : https://resolver.cloudflare-eth.com/dns-query
Warning
Experimental feature.
Automated version of RAINBOW_PEERING which does not require providing multiaddrs.
Instead, it will set up peering with peers that share the same seed (requires RAINBOW_SEED_INDEX to be set up).
Note
Runs a separate light DHT for peer routing with the main host if DHT routing is disabled.
Default: false (disabled)
Informs the largest index to derive for RAINBOW_SEED_PEERING.
If you have more instances than the default, increase it here.
Default: 100
Warning
Experimental feature, will result in increased network I/O due to Bitswap server being run in addition to the lean client.
Enable sharing of local cache to peers safe-listed with RAINBOW_PEERING
or RAINBOW_SEED_PEERING.
Once enabled, Rainbow will respond to Bitswap queries from these safelisted peers, serving locally cached blocks if requested.
Tip
The main use case for this feature is scaling and load balancing across a fleet of rainbow, or other bitswap-capable IPFS services. Cache sharing allows clustered services to check if any of the other instances has a requested CID. This saves resources as data cached on other instance can be fetched internally (e.g. LAN) rather than externally (WAN, p2p).
Caution
This mode comes with additional overhead, YMMV. A bitswap server
applies WithPeerBlockRequestFilter and only answers to safelisted peers;
however may still increase resource usage, as every requested CID will be
also broadcasted to peered nodes.
Default: false (no cache sharing, no bitswap server, client-only)
Warning
Experimental feature, forces setting RAINBOW_LIBP2P=false.
URL(s) of of remote trustless gateways to use as backend instead of libp2p node with Bitswap.
Default: not set
Requires RAINBOW_REMOTE_BACKENDS to be set.
Controls how requests to remote backend are made.
blockwill use application/vnd.ipld.raw to fetch raw blocks one by onecarwill use application/vnd.ipld.car and IPIP-402: Partial CAR Support on Trustless Gateways for fetching multiple blocks per request
Default: block
Controls whether to fetch IPNS Records (application/vnd.ipfs.ipns-record) from trustless gateway defined in RAINBOW_REMOTE_BACKENDS.
This is done in addition to other routing systems, such as RAINBOW_DHT_ROUTING or RAINBOW_HTTP_ROUTERS (if also enabled).
Default: true
Specifies the log-level, both globally and on a per-subsystem basis. Level can be one of:
debuginfowarnerrordpanicpanicfatal
Per-subsystem levels can be specified with subsystem=level. One global level
and one or more per-subsystem levels can be specified by separating them with
commas.
Default: error
Example:
GOLOG_LOG_LEVEL="error,rainbow=debug,caboose=debug" rainbowSpecifies the log message format. It supports the following values:
color-- human readable, colorized (ANSI) outputnocolor-- human readable, plain-text output.json-- structured JSON.
For example, to log structured JSON (for easier parsing):
export GOLOG_LOG_FMT="json"The logging format defaults to color when the output is a terminal, and
nocolor otherwise.
Sets the file to which the logs are saved. By default, they are printed to the standard error output.
Sets the file to which the tracing events are sent. By default, tracing is disabled.
Warning: Enabling tracing will likely affect performance.
Setting to true enables support for test fixtures required by ipfs/gateway-conformance test suite.
Adds static namesys records for deterministic tests and debugging.
Useful for testing /ipns/ support without having to do real IPNS/DNS lookup.
Example:
$ IPFS_NS_MAP="dnslink-test1.example.com:/ipfs/bafkreicysg23kiwv34eg2d7qweipxwosdo2py4ldv42nbauguluen5v6am,dnslink-test2.example.com:/ipns/dnslink-test1.example.com" ./gateway-binary
...
$ curl -is http://127.0.0.1:8081/dnslink-test2.example.com/ | grep Etag
Etag: "bafkreicysg23kiwv34eg2d7qweipxwosdo2py4ldv42nbauguluen5v6am"See tracing.md.
Optional, setting to non-empty value enables on-demand tracing per-request.
The ability to pass Traceparent or Tracestate headers is guarded by an
Authorization header. The value of the Authorization header should match
the value in the RAINBOW_TRACING_AUTH environment variable.
Optional, set to 0 by default.
The fraction (between 0 and 1) of requests that should be sampled. This is calculated independently of any Traceparent based sampling.