Struct SecurityConfig 

pub struct SecurityConfig {
    pub max_auth_attempts: u32,
    pub auth_window: u64,
    pub ban_time: u64,
    pub whitelist_ips: Vec<String>,
    pub max_sessions_per_user: usize,
    pub idle_timeout: u64,
    pub session_timeout: u64,
    pub allowed_ips: Vec<String>,
    pub blocked_ips: Vec<String>,
}

Security and access control configuration.

Fields

max_auth_attempts: u32

Maximum authentication attempts before banning IP.

Default: 5

auth_window: u64

Time window in seconds for counting authentication attempts.

Failed attempts outside this window are not counted toward the ban threshold.

Default: 300 (5 minutes)

ban_time: u64

Ban duration in seconds after exceeding max auth attempts.

Default: 300 (5 minutes)

whitelist_ips: Vec<String>

IP addresses that are never banned (whitelist).

These IPs are exempt from rate limiting and banning.

Example: [“127.0.0.1”, “::1”]

max_sessions_per_user: usize

Maximum number of concurrent sessions per user.

Default: 10

idle_timeout: u64

Idle session timeout in seconds.

Sessions idle for longer than this will be terminated. Set to 0 to disable.

Default: 3600 (1 hour)

session_timeout: u64

Maximum session duration in seconds (optional).

If set, sessions are terminated after this duration regardless of activity. Set to 0 to disable.

Default: 0 (disabled)

allowed_ips: Vec<String>

Allowed IP ranges in CIDR notation.

If non-empty, only connections from these ranges are allowed. Empty list means all IPs are allowed (subject to blocked_ips).

Example: [“192.168.1.0/24”, “10.0.0.0/8”]

blocked_ips: Vec<String>

Blocked IP ranges in CIDR notation.

Connections from these ranges are always denied.

Example: [“203.0.113.0/24”]

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

where SecurityConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.