Struct RebindingState 

pub struct RebindingState { /* private fields */ }

Per-hostname history of every distinct IP ever observed across all refresh ticks for the cell’s lifetime.

Owned by the super::ticker::TickerHandle (via the spawned task’s internal state) so observations persist across ticks without leaking out of the ticker’s lifetime. Reset to empty when a new cell starts.

Implementations

impl RebindingState

pub fn new() -> Self

Create an empty state. Callers reuse a single instance for the lifetime of the cell so prior observations persist.

pub fn hostname_count(&self) -> usize

Number of hostnames currently tracked. Test affordance / metrics.

pub fn history(&self, hostname: &str) -> &[String]

Distinct-IP history for hostname, or empty when no observation has been committed yet. Test affordance / introspection.

pub fn evaluate<'a>( &self, hostname: &str, new_targets: &'a [String], policy: &DnsRebindingPolicy, ) -> RebindingDecision<'a>

Evaluate new_targets for hostname against the per-hostname history and the operator’s DnsRebindingPolicy.

Pure function — DOES NOT mutate state. Caller emits events from the returned RebindingDecision, then calls Self::commit to persist the observation (the commit takes the EFFECTIVE targets so the history reflects what the workload actually saw).

Semantics:

• novel_ips = new_targets - history[hostname]. Order preserved from new_targets.
• threshold_exceeded = history[hostname].len() + novel_ips.len() strictly greater than policy.max_novel_ips_per_hostname. False when no novel IPs exist (a steady CDN with churn within the prior history is fine).
• allowlist_violations is empty when policy.response_ip_allowlist is empty (allowlist enforcement is strictly opt-in). Otherwise, each IP in new_targets is checked against the parsed allowlist filtered to entries with this hostname prefix; IPs failing all entries are violations.
• effective_targets is new_targets verbatim when policy.reject_on_rebind == false. Otherwise, allowlist violations AND over-cap novel IPs are filtered out.

pub fn commit(&mut self, hostname: &str, effective_targets: &[String])

Persist the current observation. Must be called AFTER the caller has emitted any threshold/rejected events so the state reflects the post-tick view.

Takes the EFFECTIVE targets (post-rejection) so the history reflects what the workload actually saw. In audit-only mode the effective targets equal the raw response, so commit is functionally equivalent to “remember everything we observed.”

Trait Implementations

impl Clone for RebindingState

fn clone(&self) -> RebindingState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RebindingState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RebindingState

fn default() -> RebindingState

Returns the “default value” for a type.