Struct RateLimitSection 

pub struct RateLimitSection {
    pub enabled: bool,
    pub requests_per_second: f64,
    pub burst_size: u32,
    pub max_tracked_ips: usize,
    pub trust_proxy: bool,
    pub trusted_proxies: Vec<String>,
}

Per-IP rate limiting (token bucket).

Fields

enabled: bool

Enable rate-limit middleware. Default: false (enable in Production appsettings).

requests_per_second: f64

Sustained requests per second per client IP.

burst_size: u32

Burst capacity before throttling.

max_tracked_ips: usize

Maximum distinct client IPs tracked (LRU eviction when exceeded).

trust_proxy: bool

Trust X-Forwarded-For / X-Real-IP headers for client IP extraction. Only enable when behind a trusted reverse proxy. Default: false.

trusted_proxies: Vec<String>

CIDR ranges of the trusted proxies. When TrustProxy is enabled, the forwarded headers are only consulted if the direct peer address belongs to one of these ranges; the client IP is then the right-most address in X-Forwarded-For that is not itself a trusted proxy.

An empty list with TrustProxy = true is treated as “trust nothing”: the headers are ignored (a client can otherwise rotate X-Forwarded-For to bypass the limiter).

Trait Implementations

impl Clone for RateLimitSection

fn clone(&self) -> RateLimitSection

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RateLimitSection

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for RateLimitSection

fn default() -> RateLimitSection

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RateLimitSection

fn deserialize<__D>( __deserializer: __D, ) -> Result<RateLimitSection, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.