Struct RateLimiter 

pub struct RateLimiter { /* private fields */ }

Implementations

impl RateLimiter

pub fn new(rps: f64) -> Self

pub fn set_default_rps(&self, rps: f64)

Replace the default per-service interval. Existing per-service entries created via Self::update_limit are left at their override; only the lazily-created defaults pick up the new pace. Non-finite or non-positive rps falls back to 1.0 - the same guard as new() so a caller can’t drive the limiter into a zero-interval (= infinite-rate) state by accident.

pub fn default_interval(&self) -> Duration

Default interval as a Duration. Lock-free.

pub async fn wait(&self, service: &str)

pub fn record_error(&self)

pub fn record_success(&self)

pub async fn update_limit(&self, service: &str, rps: f64)

Configure a service’s TARGET rate (the base_interval AIMD recovers to). A config change resets any in-flight backoff: interval == base_interval.

pub fn penalize_service(&self, service: &str)

Multiplicative-decrease: a 429 for service slows it by [RATE_LIMIT_BACKOFF_MULTIPLIER], capped at max(RATE_LIMIT_MAX_INTERVAL, base_interval) (never faster than the configured base). If the service has no slot yet, one is created at the default pace already backed off once. Takes effect on the next Self::wait. Recovery is driven by Self::reward_service on success.

pub fn reward_service(&self, service: &str)

Additive-increase: a successful round-trip for service recovers base_interval / RATE_LIMIT_RECOVERY_STEP_DIVISOR of its backoff, floored at base_interval (never faster than configured). No-op when the service has no slot or is already at base (cheap to call on every success).

pub fn service_interval(&self, service: &str) -> Option<Duration>

Current working inter-request interval for service, or None if the service has no slot yet. Introspection of the live AIMD state (used by the recovery regression test and available for operator diagnostics).