Remote control of Core Lightning Nodes in 2023

| library/plugin/service | how           | RPC methods   | authentication / authorization | notes            |
|------------------------+---------------+---------------+--------------------------------+------------------|
| commando               | commando msg  | all           | Rune + node id                 | need BOLT #8     |
|------------------------+---------------+---------------+--------------------------------+------------------|
| lnsocket               | commando msg  | all           | Rune + node id                 | need BOLT #8     |
|                        |               |               |                                | + maybe proxy or |
|                        |               |               |                                | TLS certificate  |
|                        |               |               |                                | for websocket    |
|------------------------+---------------+---------------+--------------------------------+------------------|
| lnmessage              | commando msg  | all           | Rune + node id                 | need BOLT #8     |
|                        |               |               |                                | + maybe proxy or |
|                        |               |               |                                | TLS certificate  |
|                        |               |               |                                | for websocket    |
|------------------------+---------------+---------------+--------------------------------+------------------|
| clnrest                | HTTP requests | all           | Rune                           |                  |
|------------------------+---------------+---------------+--------------------------------+------------------|
| c-lightning-REST       | HTTP requests | all           | macaroon                       |                  |
|------------------------+---------------+---------------+--------------------------------+------------------|
| sparko                 | HTTP requests | all           | ??                             |                  |
|------------------------+---------------+---------------+--------------------------------+------------------|
| cln-grpc               | gRPC          | only those    | mTLS certificates              | not in browsers  |
|                        |               | in node.proto |                                |                  |
|                        |               | file          |                                |                  |
|------------------------+---------------+---------------+--------------------------------+------------------|
| Greenlight             | ??            | only those    | mTLS certificates              | LaaS + VLS       |
|                        |               | in node.proto |                                |                  |
|                        |               | file          |                                |                  |

commando: Commando is a direct-to-node plugin that ships natively with Core Lightning. It lets you set runes to create fine-grained access controls to a CLN node's RPC, and provides access to those same RPCs via Lightning-native network connections.

CLN nodes

lnsocket

lnmessage

clnrest

c-lightning-REST

sparko

remoteRPC

others

| library/plugin     | how                     | authentication / authorization |
|--------------------+-------------------------+--------------------------------|
| clnrest            | websocket               | Rune                           |
|--------------------+-------------------------+--------------------------------|
| c-lightning-events | websocket               | ??                             |
|--------------------+-------------------------+--------------------------------|
| sparko             | Server-Sent Event (SSE) | ??                             |
|--------------------+-------------------------+--------------------------------|
| lightningd-webhook | webhook                 | ??                             |

• clnrest: CLNRest is a lightweight Python-based core lightning plugin that transforms RPC calls into a REST service.

• rbndg/c-lightning-events: Subscribe to C-Lightning events with websocket.

• fiatjaf/sparko: c-lightning RPC over HTTP with fine-grained permissions, SSE and spark-wallet support.

• fiatjaf/lightningd-webhook: A lightningd plugin that emits webhooks for each notification events.

CLN gRPC APIs: The gRPC API is automatically generated from our existing JSON-RPC API, so it has the same low-level and high-level access that app devs are accustomed to but uses a more efficient binary encoding where possible and is secured via mutual TLS authentication.

Apps using CLN gRPC APIs or bindings:

• lncapital/torq: Torq is an advanced node management software that helps lightning node operators analyze and automate their nodes. It is designed to handle large nodes with over 1000 channels, and it offers a range of features to simplify your node management tasks

• bubelov/thunder: Core Lightning node manager for Android.

• flitz-be/cln-grpc-go: Golang bindings for the CLN gRPC client.

• ShahanaFarooqui/CLN-gRPC-Client: Core Lightning gRPC Client.

• giovannizotta/cln-grpc-go-test: Simple TLS-encrypted Golang gRPC client for Core Lightning.

Greenlight is a Blockstream service offering hosted, non-custodial, Lightning Network nodes to developers and end-users. We take care of the infrastructure, while you are in control of the keys.

• Greenlight: Your personal Core Lightning node, without the technical fuss.

• Greenlight Documentation: Greenlight is a Blockstream service offering hosted, non-custodial, Lightning Network nodes to developers and end-users. We take care of the infrastructure, while you are in control of the keys.

• Blockstream/greenlight: This repository contains everything to get you started with Blockstream Greenlight, your self-sovereign Lightning node in the cloud.

• breez/breez-sdk: The Breez SDK enables mobile developers to integrate Lightning and bitcoin payments into their apps with a very shallow learning curve. [...] Crucially, this SDK is an end-to-end, non-custodial, drop-in solution powered by Greenlight, a built-in LSP, on-chain interoperability, third-party fiat on-ramps, and other services users and operators need.

• Validating Lightning Signer (VLS): Improve your Lightning node security by protecting your keys separately.

• c-lightning-graphql: graphql api plugin for c-lightning.

• Tips on Remotely Controlling Your Node: I want to point out some things which make writing tools to control your node easier. [...]

• Connecting to CLN: Schema showing how to connect to CLN nodes.

• Core Lightning Commando Bootstrapping: The Commando plugin is an excellent tool for applications seeking to establish a secure connection with a Core Lightning Network (CLN) node. [...]

• Core lightning: Calling RPC & Generating a Rune: In this blog post, I will share some methods for calling the commando-rune rpc. This command generates a rune for the node with the specified restrictions provided in parameters.

• Announcing the new CLN app on Start9!: The new Core Lightning app on Start9 is officially live!

• Greenlight by Blockstream: Scalable, Non-Custodial Lightning Infrastructure Now Open to Developers: Just over two years ago, Blockstream conceived of Greenlight: a groundbreaking Lightning hosting infrastructure that scales your Lightning deployments without compromise or custody. The last year of testing with partners has proven Greenlight both stable and simple to use. Today, we are open-sourcing the client repository and opening sign-ups to interested parties for our developer preview!

• Build On L2 supports VLS integration into Greenlight with $150,000 grant: Build On L2 (BOL2) is a community initiative that connects developers, entrepreneurs, and Bitcoiners from around the world to build on Core Lightning and the Liquid Network. Today, we're announcing our support for the Validating Lightning Signer project (VLS) through a $150,000 grant.

• Lightning-as-a-Service (LaaS): Lightning-as-a-Service, or LaaS, is a specialized service model where third-party providers offer infrastructure and solutions related to Bitcoin's Lightning Network to businesses and developers.

• lightning/bolts: BOLT: Basis of Lightning Technology (Lightning Network Specifications).

• jb55/rune-workshop: A web UI for constructing CoreLN runes.

lnsocket

lnmessage

gRPC

c-lightning-REST

Greenlight

• Introduction to commando and commando-rune: In this live we see how to create runes (restrictions tokens) with commando-rune command and how to use them with commando command in order to run authorized (by the rune) methods on a directly-connected peer. Then we write a nodejs cli app which runs the getinfo method on a directly-connected peer using lnmessage library. Finally, we write a nodejs cli app which creates invoices by running the invoice method on a directly-connected peer using lnmessage library. This gives use the opportunity to see how to add restrictions to runes.

• Simple CLN bookkeeper web app powered by lnsocket & Golang - part 1: In this live we build a simple CLN bookkeeper web app which exposes the data we get from the commands bkpr-listbalances and bkpr-listincome. We write it in Go using lnsocket library. All of this is made possible thanks to commando and bookkeeper plugins. We finish building this app in the episode #20 of LNROOM.

• Overview of lnmessage implementation: In this live we look at the implementation of lnmessage JS library that let us send commando messages to a CLN node. Specifically, we look at LnMessage.commando and NoiseState.encryptMessage methods. This give us the opportunity to talk about BOLT #8 and BOLT #1.

• Create invoices with a Node.JS cli using lnmessage and commando: In this video we write a Node.JS cli application that generates invoices by sending commando messages to a CLN node using lnmessage library.

• Getting started with CLNRest plugin: In this live we see how to start and use the new builtin plugin CLNRest that transforms RPC calls into a REST service. We learn how to use the Swagger interface to generate/send http requests. Then we connect to the websocket offered by CLNRest that sends lightningd notification. Finally, we take a look at CLNRest implementation to show how plugin developers can take advantage of the new JSON RPC method checkrune.

• Learn how to test libraries/apps that interact with CLN nodes: In this live we see how how to test lnsocket/go library using pyln-testing library.

• Get started with cln-grpc plugin: In this live we continue our tour about Core Lightning remote control with the builtin plugin cln-grpc. We write a Python application which generates invoices on our CLN node using the gRPC protocol.