Skip to content

Add experimental builder bid streaming - #10418

Merged
mergify[bot] merged 2 commits into
sigp:unstablefrom
jimmygchen:feat-bn-bid-stream
Oct 22, 2026
Merged

mergify[bot] merged 2 commits into
sigp:unstablefrom
jimmygchen:feat-bn-bid-stream

Conversation

@jimmygchen

@jimmygchen jimmygchen commented Oct 21, 2026 •

Copy link
Copy Markdown
Member

Issue Addressed

From Gloas, the beacon node requests each direct builder's bid with getExecutionPayloadBid at block production, and waits up to 400ms for responses. With bid streaming, it connects to each builder shortly before the slot, and builders can keep sending better bids, each replacing the last. At block production we use each builder's latest bid.

Proposed Changes

Bid streaming is experimental and off by default (--builder-bid-streaming). Once prepare_beacon_proposer knows the next slot's parent, the beacon node opens a websocket to each builder in the VC's builder_preferences a second before the slot:

GET /eth/v1/builder/execution_payload_bid_stream/{slot}/{parent_hash}/{parent_root}/{proposer_pubkey}

Each message is [0x01][fork byte][SSZ SignedExecutionPayloadBid]. As with HTTP bid requests, Date-Milliseconds and X-Timeout-Ms set slot start as the deadline, so the proposer decides when bidding closes.

  • We validate the latest streamed bid like an HTTP bid, and fall back to HTTP if it's invalid or the stream never connected, was refused, or was opened for a different parent or auth. If it connected but no bid arrived, we don't. (permalink)
  • A 404 or 405 means the builder doesn't serve streams, so we use HTTP and retry the stream at the next proposal.
  • Each stream caps message size, message count and total bytes read.

Additional Info

  • The endpoint and message format are based on Commit-Boost's bid streaming, for compatibility with builders and relays that implement streaming.

After Gloas, the beacon node asks each direct builder for a bid with
getExecutionPayloadBid at block production. With the experimental
--builder-bid-streaming flag (off by default) it can instead open a
websocket bid stream to each builder just before its slot:
GET /eth/v1/builder/execution_payload_bid_stream/{slot}/{parent_hash}/
{parent_root}/{proposer_pubkey}, one [0x01][fork byte][SSZ
SignedExecutionPayloadBid] message per bid.

The beacon node keeps the builder_preferences entries the validator
client posts, and once it knows the parent for its next slot it prepares
a stream per entry. Each stream connects a second before the slot, with
Date-Milliseconds and X-Timeout-Ms giving slot start as the deadline, the
same way an HTTP bid request gives its deadline, so builders send their
bid just before it. The latest bid is kept until block production.

At block production each builder's bid comes from its stream or from
HTTP, and goes through the same validation as an HTTP bid:

- A stream with a bid gives that bid. If it fails to decode or validate,
  request over HTTP.
- A stream that connected but got no bid means no bid.
- With no stream, a stream that never connected, or one opened for a
  different parent or auth, request over HTTP as before.

The proposal's streams are then closed, and they are also closed when
block production skips direct bids. A bid's signature is only decoded at
block production, on the blocking pool. Each stream has limits on message
size, message count and bytes read, a proposal streams from at most 64
builders, and a stream doesn't connect with less than 500ms left. Streams
trust the same roots as the HTTP client.
- Do all bid stream timing on the slot clock instead of Instant::now.
- Read the proposer pubkey for bid streams from the head state, so
  proposer prep doesn't lock the pubkey cache.
- Call the time block production takes the bids the auction end.
- Try a builder that answered 404 or 405 again at its next proposal,
  instead of using HTTP for it until restart.
@jimmygchen
jimmygchen marked this pull request as ready for review October 22, 2026 02:55

@eserilev eserilev left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Couldn't find any issues, LGTM!

@mergify

mergify Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

Queued — the merge queue status continues in this comment ↓.

@jimmygchen jimmygchen added the ready-for-merge This PR is ready to merge. label Oct 22, 2026
@mergify mergify Bot added the queued label Oct 22, 2026
@mergify

mergify Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

Merge Queue Status

  • ✅ Entered queue — 2026-10-22 10:56 UTC · Rule: default · triggered by rule Add ready-to-merge labeled PRs to merge queue
  • ✅ Checks passed · on draft merge queue: checking #10418 on unstable (ec2442d) #10427
  • ✅ Merged — 2026-10-22 11:27 UTC · at 6d952a22fea1b01fc03331a22ecd6a529642196e · squash

This pull request spent 30 minutes 44 seconds in the queue, including 28 minutes 23 seconds running CI.

Required conditions to merge

@mergify
mergify Bot merged commit 6d952a2 into sigp:unstable Oct 22, 2026
41 checks passed
@mergify mergify Bot removed the queued label Oct 22, 2026
@jimmygchen
jimmygchen deleted the feat-bn-bid-stream branch October 22, 2026 11:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

builder API gloas ready-for-merge This PR is ready to merge.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants