Struct BehaviorRule 

pub struct BehaviorRule {
    pub rule_type: String,
    pub threshold: u32,
    pub window: u64,
    pub pattern: String,
    pub action: String,
    pub ban_duration: Option<u64>,
    pub correlate_with_detection: bool,
}

The reference BehaviorRule, field for field.

Only return_pattern rules are tracked today, like the go port; usage and frequency rules construct but the caller drives them.

Fields

rule_type: String

usage, return_pattern, or frequency.

threshold: u32

window: u64

Sliding-window size in seconds.

pattern: String

status:<code>, json:<path>==<expected>, regex:<pattern>, or a bare (case-insensitive) substring.

action: String

ban, log, throttle, or alert.

ban_duration: Option<u64>

The ban length override for the ban action; None falls back to the reference 3600s default.

correlate_with_detection: bool

The reference correlate_with_detection: halves the effective threshold while the caller reports live detection categories for the IP (not modeled yet, matching the go port’s fail-closed note).

Trait Implementations

impl Clone for BehaviorRule

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BehaviorRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for BehaviorRule

impl PartialEq for BehaviorRule

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for BehaviorRule