Struct DlpConfig 

pub struct DlpConfig {
    pub enabled: bool,
    pub max_scan_size: usize,
    pub max_matches: usize,
    pub scan_text_only: bool,
    pub max_body_inspection_bytes: usize,
    pub fast_mode: bool,
    pub custom_keywords: Option<Vec<String>>,
    pub redaction: HashMap<SensitiveDataType, RedactionMode>,
    pub hash_salt: Option<String>,
}

DLP configuration

Fields

enabled: bool

max_scan_size: usize

Maximum body size to accept for scanning (reject if larger)

max_matches: usize

Maximum matches before stopping scan

scan_text_only: bool

Only scan text-based content types

max_body_inspection_bytes: usize

Maximum bytes to inspect for DLP patterns (truncate if larger). This bounds scan time for large payloads. Default 8KB. Content beyond this limit is not scanned but the request continues.

fast_mode: bool

Fast mode: Skip low-priority patterns (email, phone, IPv4) for better performance. Only scans critical patterns: credit cards, SSN, AWS keys, API keys, passwords, private keys, JWT, IBAN, medical records. Reduces scan time by ~30-40% for typical payloads.

custom_keywords: Option<Vec<String>>

List of custom keywords to detect (e.g., project codenames)

redaction: HashMap<SensitiveDataType, RedactionMode>

Redaction settings per data type

hash_salt: Option<String>

Salt for hash-based redaction (REQUIRED if any type uses RedactionMode::Hash) Should be a cryptographically random string, at least 32 bytes

Implementations

impl DlpConfig

pub fn validate(&self) -> Result<(), DlpConfigError>

Validate the configuration Returns error if:

• Any data type uses Hash mode but no salt is configured
• Custom keywords contain empty strings or exceed length limits

pub fn max_pattern_length(&self) -> usize

Get the maximum pattern length for overlap calculation Returns the longest pattern that could span chunk boundaries

Trait Implementations

impl Clone for DlpConfig

fn clone(&self) -> DlpConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DlpConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DlpConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DlpConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.