Struct ConnectedIpKeyExtractor 

pub struct ConnectedIpKeyExtractor;

Rate limit by the actual TCP connection IP address.

This is the secure way to do IP-based rate limiting. It uses the RemoteAddr extension set by the HTTP server, which represents the actual TCP peer address and cannot be spoofed by clients.

Prerequisites

Your HTTP server must set the RemoteAddr extension on each request:

request.insert_extension(RemoteAddr(peer_addr.ip()));

If RemoteAddr is not set, this extractor returns None (request is not rate-limited).

Security

This extractor is safe to use without a reverse proxy, as it relies on the TCP connection’s peer address rather than client-supplied headers.

Trait Implementations

impl Clone for ConnectedIpKeyExtractor

fn clone(&self) -> ConnectedIpKeyExtractor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ConnectedIpKeyExtractor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl KeyExtractor for ConnectedIpKeyExtractor

fn extract_key(&self, req: &Request) -> Option<String>

Extract the key string from the request.