pub struct RateLimit { /* private fields */ }Expand description
Token-bucket rate limiter keyed by validated client IP.
State is process-local with a hard client bound. At saturation new identities are denied; existing depleted buckets are never evicted. Only fully replenished buckets expire, with bounded scanning per request. Proxy headers are ignored unless explicitly trusted. Unknown peers share one bucket; counters reset on process restart, so replicas multiply limits.
Implementations§
Source§impl RateLimit
impl RateLimit
Sourcepub fn new(burst: u32, per_second: f64) -> Self
pub fn new(burst: u32, per_second: f64) -> Self
Configure burst and refill; invalid values fail App validation.
Args: burst: Positive request-token capacity. per_second: Finite, positive replenishment rate.
Returns:
Limiter; use Self::try_new to check configuration immediately.
Sourcepub fn try_new(burst: u32, rate: f64) -> Result<Self, RateLimitError>
pub fn try_new(burst: u32, rate: f64) -> Result<Self, RateLimitError>
Validate configuration before constructing a limiter.
Args: burst: Positive request-token capacity. rate: Finite, positive replenishment rate.
Returns: A valid limiter or a configuration error.
Sourcepub fn max_clients(self, max: usize) -> Self
pub fn max_clients(self, max: usize) -> Self
Configure a hard client-state bound with fresh counters.
Args: max: Positive tracked-client capacity; zero is invalid.
Returns: A newly configured limiter; existing clones keep their counters.
Sourcepub fn trusted_proxies(self, proxies: TrustedProxies) -> Self
pub fn trusted_proxies(self, proxies: TrustedProxies) -> Self
Trust forwarded client IP only from configured immediate peers.
Args: proxies: Policy requiring proxies to replace client headers.
Returns: Limiter using validated, normalized client IP addresses.
Sourcepub fn trust_forwarded_for(self, trust: bool) -> Self
pub fn trust_forwarded_for(self, trust: bool) -> Self
Explicit compatibility trust for the first X-Forwarded-For hop.
Args: trust: Blanket ingress trust; false ignores forwarded client IP.
Returns: Limiter with the selected policy; malformed IPs are rejected.
Trait Implementations§
Source§impl Layer<BoxCloneSyncService<Request<Body>, Response<Body>, Infallible>> for RateLimit
impl Layer<BoxCloneSyncService<Request<Body>, Response<Body>, Infallible>> for RateLimit
Source§type Service = BoxCloneSyncService<Request<Body>, Response<Body>, Infallible>
type Service = BoxCloneSyncService<Request<Body>, Response<Body>, Infallible>
Source§fn layer(&self, inner: BoxService) -> Self::Service
fn layer(&self, inner: BoxService) -> Self::Service
Auto Trait Implementations§
impl Freeze for RateLimit
impl RefUnwindSafe for RateLimit
impl Send for RateLimit
impl Sync for RateLimit
impl Unpin for RateLimit
impl UnsafeUnpin for RateLimit
impl UnwindSafe for RateLimit
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
§impl<T> Instrument for T
impl<T> Instrument for T
§fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
impl<T> Read<Exclusive, BecauseExclusive> for Twhere
T: ?Sized,
§impl<T> ServiceExt for T
impl<T> ServiceExt for T
§fn compression(self) -> Compression<Self>where
Self: Sized,
fn compression(self) -> Compression<Self>where
Self: Sized,
§fn trace_for_http(self) -> Trace<Self, SharedClassifier<ServerErrorsAsFailures>>where
Self: Sized,
fn trace_for_http(self) -> Trace<Self, SharedClassifier<ServerErrorsAsFailures>>where
Self: Sized,
§fn trace_for_grpc(self) -> Trace<Self, SharedClassifier<GrpcErrorsAsFailures>>where
Self: Sized,
fn trace_for_grpc(self) -> Trace<Self, SharedClassifier<GrpcErrorsAsFailures>>where
Self: Sized,
§fn override_request_header<M>(
self,
header_name: HeaderName,
make: M,
) -> SetRequestHeader<Self, M>where
Self: Sized,
fn override_request_header<M>(
self,
header_name: HeaderName,
make: M,
) -> SetRequestHeader<Self, M>where
Self: Sized,
§fn append_request_header<M>(
self,
header_name: HeaderName,
make: M,
) -> SetRequestHeader<Self, M>where
Self: Sized,
fn append_request_header<M>(
self,
header_name: HeaderName,
make: M,
) -> SetRequestHeader<Self, M>where
Self: Sized,
§fn insert_request_header_if_not_present<M>(
self,
header_name: HeaderName,
make: M,
) -> SetRequestHeader<Self, M>where
Self: Sized,
fn insert_request_header_if_not_present<M>(
self,
header_name: HeaderName,
make: M,
) -> SetRequestHeader<Self, M>where
Self: Sized,
§fn override_response_header<M>(
self,
header_name: HeaderName,
make: M,
) -> SetResponseHeader<Self, M>where
Self: Sized,
fn override_response_header<M>(
self,
header_name: HeaderName,
make: M,
) -> SetResponseHeader<Self, M>where
Self: Sized,
§fn append_response_header<M>(
self,
header_name: HeaderName,
make: M,
) -> SetResponseHeader<Self, M>where
Self: Sized,
fn append_response_header<M>(
self,
header_name: HeaderName,
make: M,
) -> SetResponseHeader<Self, M>where
Self: Sized,
§fn insert_response_header_if_not_present<M>(
self,
header_name: HeaderName,
make: M,
) -> SetResponseHeader<Self, M>where
Self: Sized,
fn insert_response_header_if_not_present<M>(
self,
header_name: HeaderName,
make: M,
) -> SetResponseHeader<Self, M>where
Self: Sized,
§fn set_request_id<M>(
self,
header_name: HeaderName,
make_request_id: M,
) -> SetRequestId<Self, M>where
Self: Sized,
M: MakeRequestId,
fn set_request_id<M>(
self,
header_name: HeaderName,
make_request_id: M,
) -> SetRequestId<Self, M>where
Self: Sized,
M: MakeRequestId,
§fn set_x_request_id<M>(self, make_request_id: M) -> SetRequestId<Self, M>where
Self: Sized,
M: MakeRequestId,
fn set_x_request_id<M>(self, make_request_id: M) -> SetRequestId<Self, M>where
Self: Sized,
M: MakeRequestId,
x-request-id as the header name. Read more§fn propagate_request_id(
self,
header_name: HeaderName,
) -> PropagateRequestId<Self>where
Self: Sized,
fn propagate_request_id(
self,
header_name: HeaderName,
) -> PropagateRequestId<Self>where
Self: Sized,
§fn propagate_x_request_id(self) -> PropagateRequestId<Self>where
Self: Sized,
fn propagate_x_request_id(self) -> PropagateRequestId<Self>where
Self: Sized,
x-request-id as the header name. Read more§fn request_body_limit(self, limit: usize) -> RequestBodyLimit<Self>where
Self: Sized,
fn request_body_limit(self, limit: usize) -> RequestBodyLimit<Self>where
Self: Sized,
413 Payload Too Large responses. Read more