MIME-Version: 1.0
In-Reply-To: <CAOG=w-tR89zm_VDCR-MR_+F9bRNvm4TCZSQcTmYGKRW1JQhkUg@mail.gmail.com>
References: <CAOG=w-tR89zm_VDCR-MR_+F9bRNvm4TCZSQcTmYGKRW1JQhkUg@mail.gmail.com>
Date: Thu, 5 Nov 2015 09:23:44 +0000
Message-ID: <CABsx9T3K+YfZpD4aiSxfZHpRMGfOjvdPm4fkgD067G6mRyYWbg@mail.gmail.com>
From: Gavin Andresen <gavinandresen@gmail.com>
To: Mark Friedenbach <mark@friedenbach.org>
Content-Type: multipart/alternative; boundary=001a11c3ce56fe965d0523c7ae07
Cc: Bitcoin Dev <bitcoin-dev@lists.linuxfoundation.org>
Subject: Re: [bitcoin-dev] A validation-cost metric for aggregate limits and
 fee determination
Precedence: list

--001a11c3ce56fe965d0523c7ae07
Content-Type: text/plain; charset=UTF-8

I have several thoughts:

Weighing CPU validation cost should be reasonably straightforward-- just
pick some arbitrary, commonly-available, recent hardware and then benchmark
the two things that take the bulk of validation time (hashing to create the
signature hash, then ECDSA validation), and weigh the terms in the
validation cost equation appropriately (e.g. hashing X GB of data takes the
same amount of CPU time as one libsecp256k1 validation, so count cpu cost
of an OP_CHECKSIG as 1 + X/actual_bytes_hashed).

But how should bandwidth cost be counted? There isn't an obvious "Y GB of
bandwidth-per-month equals 1 ECDSA validation. We need to find common units
for the terms in the validation cost equation for it to make sense,
otherwise we're adding apples and oranges.

I think the only units that will work is "percentage of maximum validation
ability for some reference hardware running with a network connection
capable of some reference bandwidth."

For example, imagine the reference was the typical home computer being sold
today running with some multiple or fraction of the average global
broadband connection speed of 5Mbps. CPU cost to validate a block can then
be expressed as a percentage of maximum capacity, as can bandwidth--
hooray, two metrics with the same units, so they can be added up.  If the
result is less than 100%, then the block is valid-- it can be received and
validated in a reasonable amount of time.


Rolling in UTXO growth is harder, for two reasons:
1) UTXO changes per block can be negative or positive, as opposed to
bandwidth/CPU costs.
2) It is not clear how to choose or benchmark "reference UTXO growth"

(1) could be finessed to just treat UTXO shrinkage as zero.
(2) could just be decided by picking a reasonable growth number. Since we
want the UTXO set to fit into main memory, something a bit below the
long-ish term price/performance trend of main memory would be a good target.

So, starting with that growth rate and an initial UTXO size in bytes,
divide by the number of blocks in a year to get a maximum UTXO growth in
bytes per block.

When validating a block, take the actual UTXO growth, express it as a
percentage of the maximum allowed (make it zero if it is negative), and
combine with the CPU and bandwidth percentages.

If the total is less than 100%, block is valid. Otherwise, invalid.

----------------

Now.... all of that worked through, I'm not 100% sure it solves the "do
miners or wallet have to solve a bin-packing problem to determine which
transactions to put into their blocks or what fees to attach."

I think it mostly works out-- instead of fee-per-kilobyte, it would be
fee-per-validation-cost (which is in the weird units "fraction of 100%
validation cost").

But the UTXO term might be a problem-- transactions that create more UTXOs
than they spend might end up being costly. I'm traveling right now, perhaps
somebody could pick some arbitrary reference points and try to get a rough
idea of what different transactions might pay in fees (e.g. if a
one-input-two-output had a cost of X, two-output-one-input would have a
cost of X/something).

I'm not convinced that a single validation cost metric is the best
approach-- it might be better to break the cost into three (UTXO growth,
CPU, and bandwidth) and just let miners set reasonable transaction
selection policies that keep each of the three under whatever caps are
imposed on each. If a miner comes up with a clever algorithm that lets them
pack in more transactions and get more fees, good for them!

But I do like the simplicity of a single validation cost metric.

-- 
--
Gavin Andresen

--001a11c3ce56fe965d0523c7ae07
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">I have several thoughts:<div><br></div><div>Weighing CPU v=
alidation cost should be reasonably straightforward-- just pick some arbitr=
ary, commonly-available, recent hardware and then benchmark the two things =
that take the bulk of validation time (hashing to create the signature hash=
, then ECDSA validation), and weigh the terms in the validation cost equati=
on appropriately (e.g. hashing X GB of data takes the same amount of CPU ti=
me as one libsecp256k1 validation, so count cpu cost of an OP_CHECKSIG as 1=
 + X/actual_bytes_hashed).</div><div><br></div><div>But how should bandwidt=
h cost be counted? There isn&#39;t an obvious &quot;Y GB of bandwidth-per-m=
onth equals 1 ECDSA validation. We need to find common units for the terms =
in the validation cost equation for it to make sense, otherwise we&#39;re a=
dding apples and oranges.</div><div><br></div><div>I think the only units t=
hat will work is &quot;percentage of maximum validation ability for some re=
ference hardware running with a network connection capable of some referenc=
e bandwidth.&quot;</div><div><br></div><div>For example, imagine the refere=
nce was the typical home computer being sold today running with some multip=
le or fraction of the average global broadband connection speed of 5Mbps. C=
PU cost to validate a block can then be expressed as a percentage of maximu=
m capacity, as can bandwidth-- hooray, two metrics with the same units, so =
they can be added up.=C2=A0 If the result is less than 100%, then the block=
 is valid-- it can be received and validated in a reasonable amount of time=
.</div><div><br></div><div><br></div><div>Rolling in UTXO growth is harder,=
 for two reasons:</div><div>1) UTXO changes per block can be negative or po=
sitive, as opposed to bandwidth/CPU costs.</div><div>2) It is not clear how=
 to choose or benchmark &quot;reference UTXO growth&quot;=C2=A0</div><div><=
br></div><div>(1) could be finessed to just treat UTXO shrinkage as zero.</=
div><div>(2) could just be decided by picking a reasonable growth number. S=
ince we want the UTXO set to fit into main memory, something a bit below th=
e long-ish term price/performance trend of main memory would be a good targ=
et.</div><div><br></div><div>So, starting with that growth rate and an init=
ial UTXO size in bytes, divide by the number of blocks in a year to get a m=
aximum UTXO growth in bytes per block.</div><div><br></div><div>When valida=
ting a block, take the actual UTXO growth, express it as a percentage of th=
e maximum allowed (make it zero if it is negative), and combine with the CP=
U and bandwidth percentages.</div><div><br></div><div>If the total is less =
than 100%, block is valid. Otherwise, invalid.</div><div><br></div><div>---=
-------------</div><div><br></div><div>Now.... all of that worked through, =
I&#39;m not 100% sure it solves the &quot;do miners or wallet have to solve=
 a bin-packing problem to determine which transactions to put into their bl=
ocks or what fees to attach.&quot;</div><div><br></div><div>I think it most=
ly works out-- instead of fee-per-kilobyte, it would be fee-per-validation-=
cost (which is in the weird units &quot;fraction of 100% validation cost&qu=
ot;).</div><div><br></div><div>But the UTXO term might be a problem-- trans=
actions that create more UTXOs than they spend might end up being costly. I=
&#39;m traveling right now, perhaps somebody could pick some arbitrary refe=
rence points and try to get a rough idea of what different transactions mig=
ht pay in fees (e.g. if a one-input-two-output had a cost of X, two-output-=
one-input would have a cost of X/something).</div><div><br></div><div>I&#39=
;m not convinced that a single validation cost metric is the best approach-=
- it might be better to break the cost into three (UTXO growth, CPU, and ba=
ndwidth) and just let miners set reasonable transaction selection policies =
that keep each of the three under whatever caps are imposed on each. If a m=
iner comes up with a clever algorithm that lets them pack in more transacti=
ons and get more fees, good for them!</div><div><br></div><div>But I do lik=
e the simplicity of a single validation cost metric.</div><div><br></div><d=
iv class=3D"gmail_extra">-- <br><div class=3D"gmail_signature">--<br>Gavin =
Andresen<br></div>
</div></div>

--001a11c3ce56fe965d0523c7ae07--