Struct RetryPolicy 

pub struct RetryPolicy {
    pub max_retries: u32,
    pub initial_backoff_ms: u64,
    pub max_backoff_ms: u64,
    pub jitter_ratio: f64,
    pub buffered_max_bytes: u64,
}

Origin retry policy. Field-level validation lives at config-resolve time (crates/common/src/config/mod.rs::resolve_origin_retry); this struct just carries the values.

max_retries == 0 disables retry entirely and reproduces the pre-issue-#285 behaviour exactly. buffered_max_bytes == 0 separately disables the buffer-then-commit body-phase path (#519), forcing all body-phase failures through the abort+restart streaming path.

Fields

max_retries: u32

Number of retries after the initial attempt. Total attempts = max_retries + 1. 0 disables retry.

initial_backoff_ms: u64

Backoff before the first retry, in milliseconds. Subsequent retries double up to max_backoff_ms.

max_backoff_ms: u64

Ceiling on any single backoff sleep, in milliseconds. The exponential schedule saturates here.

jitter_ratio: f64

Equal-jitter ratio in 0.0..=1.0. The actual sleep is base * (1 - ratio/2 + rand[0,1) * ratio) so a ratio of 0.0 is fully deterministic and 1.0 spreads the sleep uniformly over [0.5*base, 1.5*base) — the AWS “equal jitter” recipe.

buffered_max_bytes: u64

Per-fetch memory budget for the buffer-then-commit body-phase retry path. When the origin advertises a size_hint at or below this value, the engine drains the stream into a BytesMut before committing — drain errors get classified and re-feed the retry loop, so small blobs get mid-stream retries. Above the threshold (or when size_hint is None) the engine uses streaming abort+restart instead; memory stays bounded but each failed attempt strands up to max_blob_bytes of partial-import bytes until iroh-blobs GC reclaims them.

0 disables the buffer path entirely (all body-phase failures go through the streaming abort+restart path).

Implementations

impl RetryPolicy

pub const fn disabled() -> RetryPolicy

A policy that performs no retries: one attempt per origin. Useful in tests and for operators who want to opt out. Also sets buffered_max_bytes = 0 so the body-phase buffer path is disabled in lock-step (a disabled() policy that still buffered would surprise operators reading the field name).

Trait Implementations

impl Clone for RetryPolicy

fn clone(&self) -> RetryPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for RetryPolicy

impl Debug for RetryPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for RetryPolicy

fn default() -> RetryPolicy

Defaults: 3 retries, 100ms initial backoff doubling to a cap of 10s, with 10% equal-jitter. Worst-case extra latency on a fully-failing origin is ~700ms — three sleeps 100 + 200 + 400 ms (± up to 5% jitter each) between the four total attempts. buffered_max_bytes defaults to 4 MiB (the internal DEFAULT_BUFFERED_MAX_BYTES constant).

impl<'de> Deserialize<'de> for RetryPolicy

where RetryPolicy: Default,

fn deserialize<__D>( __deserializer: __D, ) -> Result<RetryPolicy, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for RetryPolicy

fn eq(&self, other: &RetryPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RetryPolicy

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RetryPolicy