BuilderNet v1.5

BuilderNet v1.5 introduces EVM caching, an (even) faster root hash, and trusted TLS certificates to improve the security and experience of submitting orderflow.

Changelog

• Even faster root hash
• EVM caching
• Reth upgrade, fixing possible root-hash issue
• Trusted TLS certificates (using Let’s Encrypt, TLS termination now by HAProxy) to enhance the security and experience for sending orderflow to BuilderNet and lay the groundwork for a geographically distributed orderflow ingress
• Subsidy auto-update to allow adjusting subsidies without manual intervention
• /readyz and /livez health check endpoints for better monitoring and automatic routing
• Detection of coinbase fund transfer to avoid side-effects on subsidy calculation when coinbase funds are moved to the BuilderNet multisig
• Discard mempool transactions when calculating profit
• Orderflow-proxy bugfixes and performance improvements

Versions

The build toolchain for BuilderNet v1.5 is based on [email protected] (commit d056865f34e0c52ceb9e0f524ea555db40a2762f):

Updated services

Project	New Version	Commit	Previous Version
Reth	v1.4.8	127595e	v1.3.12
rbuilder-operator	v1.2.6	964aecf	v1.1.0
orderflow-proxy	v0.5.4	e179462	v0.3.5
acme.sh	3.1.1-25-g42bbd1b4	42bbd1b	-

Not updated services

Project	Version	Commit
Lighthouse	v7.0.1	e42406d
CVM Proxy	v0.1.6	8e5c9a1
Operator API	v0.7.0	a8296e4
HAProxy	v3.0.6

Changes & Pull Requests

Project	Changes
reth	v1.3.12...v1.4.8 (513 PRs)
rbuilder / rbuilder-operator	v1.1.0...v1.2.6 (36 PRs)
orderflow-proxy	v0.3.5...v0.5.4 (11 PRs)

Services Configuration

Service	Configuration
Operator API	meta-confidential-compute@d8bcb39
HAProxy	meta-evm@a0be2d7
Lighthouse	meta-evm@a0be2d7
Orderflow Proxy	meta-evm@a0be2d7
Rbuilder	meta-evm@a0be2d7
Reth	meta-evm@a0be2d7

Artifacts

Signed artifacts are stored at https://downloads.buildernet.org/buildernet-images/.

The specific TDX VM image for the BuilderNet v1.5 release is buildernet-v1.5.0-azure-tdx.wic.vhd

Measurements

These are the new live measurements for BuilderNet v1.5:

{
    "measurement_id": "buildernet-v1.5.0-azure-tdx.wic.vhd",
    "attestation_type": "azure-tdx",
    "measurements": {
        "4": {
            "expected": "cd9ade37fcd214d091c632ac558e58127adcf387e6b2ef7b093d87f3fbbd2182"
        },
        "9": {
            "expected": "5fa70d4bc380f0dbcb5b475b14cf1a06a6042db0fe915317537ca22533ac9cff"
        },
        "11": {
            "expected": "3408ca2a82fba046cdc00055a1f53475a7ebc5650cbb4b5e0fdb7c7e0d8e3818"
        }
    }
}

Reproducible Builds

BuilderNet v1.5 supports fully reproducible TDX image builds. The image you build will produce the exact same TDX measurements as our reference builds.

The main entry point for the image builds is the flashbots/yocto-manifests repository, and for this release specifically the [email protected] (commit d056865f34e0c52ceb9e0f524ea555db40a2762f).

To reproducibly build it, clone the repository, check out the tag and build it with Docker/Podman:

git clone https://github.com/flashbots/yocto-manifests.git
cd yocto-manifests
git checkout v1.5.0
make image-buildernet

You can confirm that the hash of your build matches the expected one:

make measurements-buildernet

Build host specs:

• Ubuntu 22.04 x64 (Linux kernel 6.8.0-49-generic), fully updated system
• Intel Xeon Gold 6312U, 48vCPUs, 512GB memory

---

Join the conversation on the BuilderNet forum and the BuilderNet Telegram group!