Struct StuffingConfig 

pub struct StuffingConfig {

    pub failure_window_ms: u64,
    pub failure_threshold_suspicious: u32,
    pub failure_threshold_high: u32,
    pub failure_threshold_block: u32,
    pub distributed_min_ips: usize,
    pub distributed_window_ms: u64,
    pub username_targeted_min_ips: usize,
    pub username_targeted_min_failures: u64,
    pub username_targeted_window_ms: u64,
    pub global_velocity_threshold_rate: f64,
    pub global_velocity_window_ms: u64,
    pub global_velocity_max_track: usize,
    pub takeover_window_ms: u64,
    pub takeover_min_failures: u32,
    pub low_slow_min_hours: usize,
    pub low_slow_min_per_hour: u32,
    pub auth_path_patterns: Vec<String>,
    pub max_entities: usize,
    pub max_distributed_attacks: usize,
    pub max_takeover_alerts: usize,
    pub cleanup_interval_ms: u64,
}

Configuration for credential stuffing detection.

Fields

failure_window_ms: u64

Sliding window duration (ms) - default 5 minutes

failure_threshold_suspicious: u32

Failures to flag as suspicious

failure_threshold_high: u32

Failures to flag as high risk

failure_threshold_block: u32

Failures to trigger block

distributed_min_ips: usize

Minimum IPs for distributed attack (fingerprint-based)

distributed_window_ms: u64

Window for distributed attack correlation (ms)

username_targeted_min_ips: usize

Minimum IPs targeting same username for alert

username_targeted_min_failures: u64

Minimum failures against username for alert

username_targeted_window_ms: u64

Window for username-targeted correlation (ms)

global_velocity_threshold_rate: f64

Failure rate (per second) that triggers velocity alert

global_velocity_window_ms: u64

Window for global velocity tracking (ms)

global_velocity_max_track: usize

Maximum failures to track in global velocity window

takeover_window_ms: u64

Window to check failures before success (ms)

takeover_min_failures: u32

Minimum failures before success to flag takeover

low_slow_min_hours: usize

Minimum hours with failures for low-and-slow

low_slow_min_per_hour: u32

Minimum failures per hour for low-and-slow

auth_path_patterns: Vec<String>

Path patterns that indicate auth endpoints

max_entities: usize

Maximum entities to track

max_distributed_attacks: usize

Maximum distributed attacks to track

max_takeover_alerts: usize

Maximum takeover alerts to retain

cleanup_interval_ms: u64

Cleanup interval (ms)

Implementations

impl StuffingConfig

pub fn validated(self) -> Self

Validate configuration values and return a sanitized config.

Ensures thresholds are in ascending order and within reasonable bounds. Windows under 100ms are allowed for testing purposes.

Trait Implementations

impl Clone for StuffingConfig

fn clone(&self) -> StuffingConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StuffingConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for StuffingConfig

fn default() -> Self

Returns the “default value” for a type.