Struct PerTenantRateLimitConfig 

pub struct PerTenantRateLimitConfig {
    pub burst: u32,
    pub qps: f64,
}

Per-tenant (secondary) rate-limit configuration.

Sits in front of the per-token bucket as the primary defence against a noisy-neighbour tenant saturating a shared token’s overall quota. The per-token bucket (see RateLimitConfig) is retained as a backstop.

Composite bucket key is (TokenId, TenantId) — so a single token used by two tenants does not let one tenant drain the other’s allowance.

Field semantics:

• burst == 0 => disabled (this layer admits unconditionally). The per- token backstop still applies if it is itself configured.
• qps == 0.0 => non-zero burst is a one-shot allowance with no refill. Useful for tests; in production an operator who wants no per-tenant ceiling should set burst = 0 to disable the layer outright.

Fields

burst: u32

Maximum burst — the per-tenant bucket capacity, in permits.

qps: f64

Steady-state requests-per-second admitted per (token, tenant) pair. 0.0 disables refill (the bucket drains and stays empty until process restart).

Implementations

impl PerTenantRateLimitConfig

pub const DEFAULT_BURST: u32 = 20

Default per-tenant burst. Deliberately conservative so a misbehaving tenant on a shared token cannot trample neighbours; operators tune upward as their multi-tenant workload demands.

pub const DEFAULT_QPS: f64 = 10.0

Default per-tenant steady-state QPS. Matches the conservative DEFAULT_BURST shape — sized for the small internal tenant fleet today; operators raise it as needed.

pub const fn disabled() -> Self

Disabled config: per-tenant layer admits unconditionally.

pub const fn is_disabled(&self) -> bool

true if the per-tenant layer is disabled. Determined solely by burst == 0: a non-zero burst with qps == 0.0 is a valid (no- refill) configuration, not a disabled one.

Trait Implementations

impl Clone for PerTenantRateLimitConfig

fn clone(&self) -> PerTenantRateLimitConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PerTenantRateLimitConfig

impl Debug for PerTenantRateLimitConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PerTenantRateLimitConfig

fn default() -> Self

Default to the conservative active configuration (burst = 20, qps = 10.0). Operators reach the fully-disabled posture via PerTenantRateLimitConfig::disabled.

impl PartialEq for PerTenantRateLimitConfig

fn eq(&self, other: &PerTenantRateLimitConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for PerTenantRateLimitConfig