feat: support multiple allowIPs for a remote connection from one of KMS servers

[jaeseung-bae]

Description

• ASIS: support only one ip address for a connection from a remote KMS server
• TOBE: support multiple ip addresses as allowList for a connection from one of remote KMS servers

[codecov]

Codecov Report

Merging #707 (486c71a) into main (449aa31) will increase coverage by 0.04%.
Report is 6 commits behind head on main.
The diff coverage is 78.57%.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #707      +/-   ##
==========================================
+ Coverage   66.54%   66.58%   +0.04%     
==========================================
  Files         285      285              
  Lines       37915    37919       +4     
==========================================
+ Hits        25229    25249      +20     
+ Misses      10878    10867      -11     
+ Partials     1808     1803       -5     

Files Changed	Coverage Δ
config/config.go	79.36% <ø> (ø)
config/toml.go	74.19% <ø> (ø)
privval/utils.go	33.33% <0.00%> (ø)
privval/internal/ip_filter.go	70.37% <88.88%> (-7.90%)	⬇️
node/node.go	61.49% <100.00%> (ø)
privval/signer_listener_endpoint.go	88.81% <100.00%> (ø)

... and 10 files with indirect coverage changes

[zemyblue]

Is there a valid address checking?
Is it possible using url not ip? if then, are there any security issues?

[jaeseung-bae]

Is there a valid address checking?

There is no validation logic for valid address.

Is it possible using url not ip? if then, are there any security issues?

For now, it's not possible because when accepting a connection what I can receive is (net.Conn, error) which has only net.Addr for local and remote. There's no way to find out url.

[zemyblue]

Is there a valid address checking?

There is no validation logic for valid address.

Is it possible using url not ip? if then, are there any security issues?

For now, it's not possible because when accepting a connection what I can receive is (net.Conn, error) which has only net.Addr for local and remote. There's no way to find out url.

Then, what happen if I write 127.0.1?

[jaeseung-bae]

Then, what happen if I write 127.0.1?

None of the connections will be accepted because no address match to 127.0.1