Struct DynamicRules 

pub struct DynamicRules {

    pub rule_id: String,
    pub version: u64,
    pub timestamp: Option<DateTime<Utc>>,
    pub expires_at: Option<DateTime<Utc>>,
    pub ttl: u64,
    pub ip_blacklist: Vec<String>,
    pub ip_whitelist: Vec<String>,
    pub ip_ban_duration: u64,
    pub blocked_countries: Vec<String>,
    pub whitelist_countries: Vec<String>,
    pub global_rate_limit: Option<u64>,
    pub global_rate_window: Option<u64>,
    pub endpoint_rate_limits: BTreeMap<String, (u64, u64)>,
    pub blocked_cloud_providers: BTreeSet<String>,
    pub blocked_user_agents: Vec<String>,
    pub suspicious_patterns: Vec<String>,
    pub enable_penetration_detection: Option<bool>,
    pub enable_ip_banning: Option<bool>,
    pub enable_rate_limiting: Option<bool>,
    pub auto_ban_threshold: Option<u64>,
    pub auto_ban_duration: Option<u64>,
    pub enable_rate_limit_auto_ban: Option<bool>,
    pub emergency_mode: bool,
    pub emergency_whitelist: Vec<String>,
}

The reference DynamicRules wire model, field for field (the same shape the guard-agent models carry).

Eq is unreachable while the model carries a DateTime (chrono answers PartialEq only), hence the pinpointed allowance.

Fields

rule_id: String

Unique rule ID.

version: u64

Rule version number.

timestamp: Option<DateTime<Utc>>

Rule creation/update timestamp.

expires_at: Option<DateTime<Utc>>

Rule expiration time.

ttl: u64

Cache TTL in seconds (drives the client-side rules cache).

ip_blacklist: Vec<String>

IPs to ban.

ip_whitelist: Vec<String>

IPs to allow.

ip_ban_duration: u64

Ban duration in seconds.

blocked_countries: Vec<String>

Countries to block.

whitelist_countries: Vec<String>

Countries to allow.

global_rate_limit: Option<u64>

Global rate limit.

global_rate_window: Option<u64>

Global rate window in seconds.

endpoint_rate_limits: BTreeMap<String, (u64, u64)>

Per-endpoint rate limits {endpoint: (requests, window)}.

blocked_cloud_providers: BTreeSet<String>

Cloud providers to block (the AWS:!region scoping survives).

blocked_user_agents: Vec<String>

User agents to block.

suspicious_patterns: Vec<String>

Additional suspicious patterns.

enable_penetration_detection: Option<bool>

Override penetration detection setting.

enable_ip_banning: Option<bool>

Override IP banning setting.

enable_rate_limiting: Option<bool>

Override rate limiting setting.

auto_ban_threshold: Option<u64>

Override auto-ban threshold setting.

auto_ban_duration: Option<u64>

Override auto-ban duration setting.

enable_rate_limit_auto_ban: Option<bool>

Override rate-limit auto-ban setting.

emergency_mode: bool

Emergency lockdown mode.

emergency_whitelist: Vec<String>

Emergency whitelist IPs.

Implementations

impl DynamicRules

pub fn identity(&self) -> (&str, u64)

The rule identity the gates compare ((rule_id, version)).

impl DynamicRules

pub const fn auto_ban_overrides_valid(&self) -> bool

The pydantic ge=1 constraints on the auto-ban overrides: the reference rejects the whole delivery when either is zero.

Trait Implementations

impl Clone for DynamicRules

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DynamicRules

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DynamicRules

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DynamicRules

where DynamicRules: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for DynamicRules

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for DynamicRules

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for DynamicRules