Struct HeaderProfiler 

pub struct HeaderProfiler { /* private fields */ }

Header profiler for learning and detecting header anomalies.

Uses DashMap for lock-free concurrent access to per-endpoint baselines. Supports LRU eviction when max_endpoints is exceeded.

Implementations

impl HeaderProfiler

pub fn new() -> Self

Create a new header profiler with default configuration.

pub fn with_config(max_endpoints: usize, min_samples: u64) -> Self

Create a new header profiler with custom configuration.

Arguments

• max_endpoints - Maximum number of endpoints to track
• min_samples - Minimum samples before anomaly detection activates

pub fn learn(&self, endpoint: &str, headers: &[(String, String)])

Learn from a request’s headers, updating the baseline.

This method updates the per-endpoint baseline with the observed headers. It tracks header frequencies and value statistics (length, entropy).

Arguments

• endpoint - The endpoint path/template
• headers - Slice of (header_name, header_value) pairs

Thread Safety

This method is thread-safe and can be called concurrently from multiple request handlers.

pub fn analyze( &self, endpoint: &str, headers: &[(String, String)], ) -> HeaderAnomalyResult

Analyze a request’s headers against the learned baseline.

Returns a list of anomalies detected, along with a risk contribution score. Only generates anomalies if the baseline has enough samples.

Arguments

• endpoint - The endpoint path/template
• headers - Slice of (header_name, header_value) pairs

Returns

HeaderAnomalyResult with detected anomalies and risk contribution

Thread Safety

This method is thread-safe and can be called concurrently.

pub fn get_baseline(&self, endpoint: &str) -> Option<HeaderBaseline>

Get the learned baseline for an endpoint.

Returns a clone of the baseline for inspection/debugging.

pub fn endpoint_count(&self) -> usize

Get the number of endpoints currently tracked.

pub fn max_endpoints(&self) -> usize

Get the maximum endpoints this profiler can track.

pub fn min_samples(&self) -> u64

Get the minimum samples required before anomaly detection.

pub fn clear(&self)

Clear all baselines (for testing).

pub fn stats(&self) -> HeaderProfilerStats

Get statistics about the profiler state.

Trait Implementations

impl Clone for HeaderProfiler

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HeaderProfiler

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HeaderProfiler

fn default() -> Self

Returns the “default value” for a type.