DFINITY Foundation

Internet Computer Association

Elect/Bless new replica binary revision (commit f2fc23733b52c53c8f1cfc05eba508c05e87c8b1)

Changelog:
* Boundary nodes: TLS cert update fixes
* Boundary nodes: Cache query calls in nginx
* Consensus: Update consensus ECDSA payload types
* Consensus: Fix problems when a node is joining a busy subnet
* Crypto: Implement TLS client handshake using rustls
* Crypto: Improve client and server certificate verification
* Crypto: Refactor IDKG API
* Crypto: Improve Threshold Signature benchmarks
* Crypto: Initial implementation of MEGa encryption for IDKG
* Crypto: Update zkcrypto/pairing dependencies
* Execution: Introduce per canister heap delta limit to share the heap delta capacity in a fairer manner between canisters.
* Execution: reduce the instruction limit for executing install_code messages on dedicated subnets.  It was initially set to a higher value to support specific use cases but after looking at data from recent install_code requests the value is safe to be lowered to the same value as non dedicated subnets.
* Execution: Adjust cost of various system API calls to better reflect the actual amount of work done in these calls.
* Execution: Use `threadpool::ThreadPool` instead of rayon for query handling.  Rayon shares thread pools underneath the hood which can cause deadlocks.
* Execution: Use the same instruction limit for executing queries as update messages.  Before queries were using a separate constant that had the problem of becoming out of date when the limit for update messages was updated.
* Execution: Reclaim allocated memory on failed message execution.  When a message execution fails, we undo the changes it made, previously we were not adjusting how much memory subsequent executions had available.  This meant that subsequent message executions in the round had less memory available. 
* Execution: Disable the new signal handler on Windows WSL as it is not properly supported.
* Execution: When executing queries on wasm modules which have not yet been compiled to native, prevent multiple compilation processes.
* Messaging: Track memory consumed by in-flight canister messages
* Net: Remove legacy api/v1 HTTP endpoints
* Net: Add rate limiting per connection
* Net: Add buffering, rate limiting and concurrency limit on the ingress ingestion service
* Net: Share the threadpool between query execution and the ingress message filter
* Node: Rework wasm compilation cache
* Node: GuestOS SELinux policy
* Node: Basic CPU profiling with pprof
* P2P: ECDSA message updates, artifact pool improvements
* Various bugfixes and test updates
