Struct AuthGuardConfig 

pub struct AuthGuardConfig {
    pub max_failures_account: u32,
    pub account_window_secs: u64,
    pub base_lockout_secs: u64,
    pub max_failures_ip: u32,
    pub ip_window_secs: u64,
    pub ip_base_lockout_secs: u64,
    pub backoff_multiplier: f64,
    pub max_lockout_secs: u64,
}

Tunable thresholds for the auth-guard’s lockout policy.

Defaults are tuned for an SMTP/IMAP submission server:

• 5 failures per (IP, username) in a 15-minute window → 30-minute lockout
• 20 failures per IP (any user) in a 60-minute window → 1-hour lockout
• Exponential backoff with multiplier 2.0, capped at 24 hours

Fields

max_failures_account: u32

Failures within account_window_secs to trigger an account-level lockout. Counts per (IP, username) pair.

account_window_secs: u64

Sliding-window length for counting account-level failures.

base_lockout_secs: u64

First-lockout duration for account-level breaches. Subsequent lockouts grow by backoff_multiplier ^ consecutive_lockouts.

max_failures_ip: u32

Failures within ip_window_secs (any user) to trigger an IP-level lockout.

ip_window_secs: u64

Sliding-window length for counting IP-level failures.

ip_base_lockout_secs: u64

First-lockout duration for IP-level breaches.

backoff_multiplier: f64

Exponential-backoff multiplier applied to repeat offenders. 2.0 → each subsequent lockout doubles the previous duration.

max_lockout_secs: u64

Hard ceiling on lockout duration regardless of backoff.

Trait Implementations

impl Default for AuthGuardConfig

fn default() -> Self

Returns the “default value” for a type.