Struct HybridRateLimiter 

pub struct HybridRateLimiter { /* private fields */ }

Hybrid rate limiter with in-memory fast path and periodic DB sync.

Per-user/per-IP checks use a local DashMap for sub-microsecond decisions, so a 100 req/min limit becomes 100 × N across an N-node cluster. Right for DDoS protection where the threshold is approximate. For cluster-wide correctness (e.g. billing quotas) use StrictRateLimiter.

Global keys always hit the database for cross-node consistency.

DESIGN: Per-node rate limiting. Cluster-wide consistency trades latency for accuracy. With N nodes, effective limit is N× per-key. Keep per-node budgets low.

Implementations

impl HybridRateLimiter

pub fn new(pool: PgPool) -> Self

pub fn with_max_buckets(pool: PgPool, max_local_buckets: usize) -> Self

Create a hybrid rate limiter with a custom local bucket limit.

pub async fn check( &self, bucket_key: &str, config: &RateLimitConfig, ) -> Result<RateLimitResult>

pub fn build_key( &self, key_type: RateLimitKey, action_name: &str, auth: &AuthContext, request: &RequestMetadata, ) -> String

pub async fn enforce( &self, bucket_key: &str, config: &RateLimitConfig, ) -> Result<RateLimitResult>

pub fn cleanup_local(&self, max_idle: Duration)

Clean up expired local buckets (call periodically).

Trait Implementations

impl RateLimiterBackend for HybridRateLimiter

fn check<'a>( &'a self, bucket_key: &'a str, config: &'a RateLimitConfig, ) -> Pin<Box<dyn Future<Output = Result<RateLimitResult>> + Send + 'a>>

Check whether a single token is available for the given bucket.

fn build_key( &self, key_type: RateLimitKey, action_name: &str, auth: &AuthContext, request: &RequestMetadata, ) -> String

Build the bucket key string for a (key kind, action, auth, request) tuple.

fn enforce<'a>( &'a self, bucket_key: &'a str, config: &'a RateLimitConfig, ) -> Pin<Box<dyn Future<Output = Result<RateLimitResult>> + Send + 'a>>

Check and convert a denial into a ForgeError::RateLimitExceeded.