Relayer
Overview
Core Function
The relayer runs the transport layer of the Hyperlane protocol by delivering messages from origin to destination chains. Depending on the Interchain Security Module (ISM) specified by the recipient, metadata may be required to prove the security of the message, such as Validator signatures for the Multisig ISM, merkle proofs, zero-knowledge proofs, and more. So before attempting to deliver, the relayer gathers any ISM-specific metadata.
The relayer will periodically retry metadata gathering and message submission. This is important to improve resilience against disruptions, such as: no gas payment made to pay for delivery, insufficient relayer balance, temporary spikes in transaction fees on the destination, Validator downtime.
Relayer Incentives
Message senders are charged for delivery on the origin chain, and it is the relayer operator's responsibility to rebalance revenue to destination chain accounts so delivery transaction fees can always be paid for. The relayer does not receive direct token incentives from the protocol, but operators can configure their fee structure for providing their critical service. For more information, check out Interchain Gas Payments (IGPs).
Operating a Relayer
Relayers can easily configure the messages that they wish to process. Currently, the relayer will support:
- A sender / recipient whitelist.
- A sender / recipient blacklist.
- The ability to accept payments on the origin chain for processing a message on the destination chain.
While permissionless to run, it's up to the message sender to pick which relayer to pay for delivery. Mailbox integrations usually default to always paying the same relayer, but message senders can opt out of this. For convenience, Hyperlane will run an open source and configurable relayer agent, implemented as a Rust binary. If you'd like to run your own relayer, we've open sourced the binary here.
Running your own relayer involves deploying an IGP contract and maintaining token exchange rates and gas prices inside of it to accurately charge message delivery fees.
Want to run a relayer? Follow the Relayer guide.
In more detail
The relayer is comprised of two main tasks: an Indexer for each origin, and a Submitter for each destination.
The Indexer
Both new and historic messages are indexed by querying Mailbox contract events using RPCs. Gas payments are also indexed to confirm senders paid for delivery, and certain ISMs use additional origin chain data. This is the case with the Multisig ISM, which relies on the Merkle Tree Hook contract to inform the Relayer about which Validator signature corresponds to which message. There is a standalone indexing task spawned for every event type (Messages, IGP, Merkle Tree insertion).
The indexer writes to a local database (RocksDB) as a means of caching, as well as communicating with the Submitter task - the latter periodically polls the database to check if new messages were dispatched.
The relayer prioritizes new messages over old ones, under the assumption that old ones are more likely to have been delivered. This means that when (re)started, two pointers are created: a forward one and a backward one, both initialized to the blockchain tip and using the monotonically increasing nonce field of messages to iterate. A similar approach is used to index the other events, but some lack a sequence number and can be missed if incorrect RPC responses are received - which happens very often. As such, the message indexing task sends transaction IDs where it found events to the other indexing tasks, guaranteeing no Hyperlane event is missed as long as it occured within the same transaction as the Mailbox.dispatch() call.
The Submitter
Messages go through four stages as part of the Submitter, which are spawned as independent tasks described below.
| Submitter Task | Description |
|---|---|
| Message Processor | Polls the local database to check if there are any undelivered messages and pushes them to the Prepare step's queue. |
| Prepare Task | Pops messages from its queue, ensures gas was paid, fetches any metadata and simulates the message delivery transaction. If the simulation succeeds, the message is pushed to the Submit step's queue. Otherwise, the message is pushed back to the Prepare queue. |
| Submit Task | Pops messages from its queue, and sends the delivery transaction onchain. Deliveries are batched whenever possible. If there is no error broadcasting the transaction, the message is pushed to the Confirm step's queue. Otherwise, the message is pushed back to the Prepare queue. |
| Confirm Task | Awaits finality; if a chain reorg occurs, or the delivery transaction reverts, the message is pushed back to the Prepare queue. |
Messages are delivered to their recipient by calling Mailbox.process() on the destination chain with the aforementioned metadata.
The retry count of a message determines its next delivery attempt according to an exponential backoff strategy. Currently, there is no fixed maximum number of retries after which the relayer will cease to attempt processing a message. However, this is not a guarantee of indefinite retries, and operators should not rely on this as a service level agreement (SLA).