Struct TarpitManager 

pub struct TarpitManager { /* private fields */ }

Thread-safe tarpit manager.

Uses DashMap for lock-free concurrent access to tarpit states. Uses a semaphore to limit concurrent tarpit delays and prevent resource exhaustion.

Implementations

impl TarpitManager

pub fn new(config: TarpitConfig) -> Self

Create a new tarpit manager with the given configuration.

pub fn config(&self) -> &TarpitConfig

Get the configuration.

pub fn is_enabled(&self) -> bool

Check if tarpitting is enabled.

pub fn len(&self) -> usize

Get the number of tracked states.

pub fn is_empty(&self) -> bool

Check if the store is empty.

pub fn peek_delay(&self, ip: &str) -> TarpitDecision

Calculate delay for an IP without incrementing state.

Use this for read-only delay calculation (e.g., for headers).

pub fn tarpit(&self, ip: &str) -> TarpitDecision

Calculate and apply tarpit for an IP, incrementing state.

Returns the delay decision. Use apply_delay to actually sleep.

pub async fn apply_delay(&self, ip: &str) -> TarpitDecision

Apply tarpit delay asynchronously.

Uses tokio::time::sleep which releases the worker thread during the delay. Limited by semaphore to prevent resource exhaustion from too many concurrent delays.

If the concurrent delay limit is reached, returns a decision with delay_ms=0 to prevent DoS attacks that exploit the tarpit mechanism itself.

pub fn rejected_count(&self) -> u64

Returns the number of tarpits rejected due to capacity limits.

pub fn available_slots(&self) -> usize

Returns the number of available tarpit slots.

pub fn is_tarpitted(&self, ip: &str) -> bool

Check if an IP is actively tarpitted (level > 1).

pub fn get_state(&self, ip: &str) -> Option<TarpitState>

Get tarpit state for an IP.

pub fn reset(&self, ip: &str) -> bool

Reset tarpit state for an IP.

pub fn reset_all(&self) -> usize

Reset all tarpit states.

pub fn start_background_tasks(self: Arc<Self>)

Start background tasks (decay, cleanup).

Spawns a background task that periodically runs maintenance.

pub async fn decay_all(&self)

Run decay on all states with chunked processing to avoid blocking.

Reduces delay levels for IPs that have been idle and removes expired states.

pub fn stats(&self) -> TarpitStats

Get tarpit statistics.

Trait Implementations

impl Default for TarpitManager

fn default() -> Self

Returns the “default value” for a type.