feat(asb): limit p2p connections

[binarybaron]

• feat(asb): limit p2p connections to prevent DoS via resource exhaustion
• feat(asb): enable debug info in Docker release builds for perf and stack traces

---

Note

Medium Risk
Touches core P2P/Tor connection handling and introduces new connection limiting behavior, which can affect reachability and load characteristics if mis-tuned.

Overview
Hardens ASB networking against resource-exhaustion/DoS. It adds libp2p connection_limits to cap pending/established inbound connections and per-peer connections, and improves logging when inbound connections are denied due to limits.

On the Tor onion-service path, add_onion_service now accepts a max_concurrent_rend_requests parameter and processes rendezvous requests with bounded concurrency to apply backpressure (helping PoW effort ramp under load); this is wired through ASB config as a new tor.max_concurrent_rend_requests option (default 16) and documented.

Operationally, the ASB Docker build enables release debug symbols (CARGO_PROFILE_RELEASE_DEBUG=1), and the orchestrator’s compose adds SYS_PTRACE capability for the asb container; Cargo.lock is refreshed with multiple dependency bumps and a few new transitive crates.

^{Written by Cursor Bugbot for commit 1c6790e. This will update automatically on new commits. Configure here.}

[binarybaron]

bugobt run

[binarybaron]

bugbot run

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}