pub const DEFAULT_MAX_CONNECTIONS_PER_SUBNET: u64 = 0;Expand description
Default per-(cluster, source-SUBNET) connection limit. 0 means
unlimited, which disables the subnet limiter entirely and leaves the
pre-existing per-IP behaviour strictly unchanged. This is a SECOND,
independent counter beside DEFAULT_MAX_CONNECTIONS_PER_IP, not a
replacement: the per-IP cap serves the API-gateway case, the
per-subnet cap the denial-of-service case where an attacker holding a
routed prefix takes a fresh address per connection
(sozu-proxy/sozu#1270). Both gates are consulted and both must admit.