Struct H2FloodConfig 

pub struct H2FloodConfig {

    pub max_rst_stream_per_window: u32,
    pub max_ping_per_window: u32,
    pub max_settings_per_window: u32,
    pub max_empty_data_per_window: u32,
    pub max_window_update_stream0_per_window: u32,
    pub max_continuation_frames: u32,
    pub max_glitch_count: u32,
    pub max_rst_stream_lifetime: u64,
    pub max_rst_stream_abusive_lifetime: u64,
    pub max_rst_stream_emitted_lifetime: u64,
    pub max_header_list_size: u32,
    pub max_header_table_size: u32,
    pub max_header_fields: u32,
}

Configurable thresholds for H2 flood detection.

All values have safe defaults matching the compile-time constants. When configured via listener config, None values fall back to these defaults.

Fields

max_rst_stream_per_window: u32

Maximum RST_STREAM frames per second window (CVE-2023-44487, CVE-2019-9514)

max_ping_per_window: u32

Maximum PING frames per second window (CVE-2019-9512)

max_settings_per_window: u32

Maximum SETTINGS frames per second window (CVE-2019-9515)

max_empty_data_per_window: u32

Maximum empty DATA frames per second window (CVE-2019-9518)

max_window_update_stream0_per_window: u32

Maximum connection-level (stream 0) WINDOW_UPDATE frames per sliding window. Caps the CPU cost of a peer sending a flood of non-zero stream-0 WINDOW_UPDATEs — each is individually legal so the generic glitch counter does not trip, yet millions per connection still burn server CPU parsing and updating the flow window.

max_continuation_frames: u32

Maximum CONTINUATION frames per header block (CVE-2024-27316)

max_glitch_count: u32

Maximum accumulated protocol anomalies before ENHANCE_YOUR_CALM

max_rst_stream_lifetime: u64

Absolute lifetime cap on RST_STREAM frames received on a single connection (CVE-2023-44487). Never decays — provides a ceiling the per-window counter cannot.

max_rst_stream_abusive_lifetime: u64

Lifetime cap on “abusive” (pre-response-start) RST_STREAM frames — the Rapid Reset signature (CVE-2023-44487).

max_rst_stream_emitted_lifetime: u64

Absolute lifetime cap on server-emitted RST_STREAM frames for this connection (CVE-2025-8671 “MadeYouReset”). Only non-NoError resets count — graceful cancels are exempt.

max_header_list_size: u32

Maximum accumulated HPACK-decoded header list size per request (SETTINGS_MAX_HEADER_LIST_SIZE, RFC 9113 §6.5.2).

max_header_table_size: u32

Maximum HPACK dynamic table size (SETTINGS_HEADER_TABLE_SIZE) accepted from the peer. Caps the value the peer advertises in SETTINGS frames to prevent unbounded HPACK encoder memory growth.

max_header_fields: u32

Maximum number of materialized header fields, enforced per HEADERS block and (independently) per trailers block — HPACK fields plus expanded cookie crumbs (RFC 9113 §8.2.3). Bounds the HPACK indexed-reference header bomb, where many 1-byte indexed references each materialize a Pair of per-entry bookkeeping.

Implementations

impl H2FloodConfig

pub fn new( max_rst_stream_per_window: u32, max_ping_per_window: u32, max_settings_per_window: u32, max_empty_data_per_window: u32, max_window_update_stream0_per_window: u32, max_continuation_frames: u32, max_glitch_count: u32, max_rst_stream_lifetime: u64, max_rst_stream_abusive_lifetime: u64, max_rst_stream_emitted_lifetime: u64, max_header_list_size: u32, max_header_table_size: u32, max_header_fields: u32, ) -> Self

Create a validated config, clamping all thresholds to at least 1. Zero thresholds would cause immediate flood detection on any frame.

Trait Implementations

impl Clone for H2FloodConfig

fn clone(&self) -> H2FloodConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for H2FloodConfig

impl Debug for H2FloodConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for H2FloodConfig

fn default() -> Self

Returns the “default value” for a type.

impl Eq for H2FloodConfig

impl PartialEq for H2FloodConfig

fn eq(&self, other: &H2FloodConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for H2FloodConfig