Struct RuleBucket 

pub struct RuleBucket {
    pub rule_id: RuleId,
    pub description: Option<String>,
    pub blocked: Vec<RecordedAttempt>,
    pub bypassed: Vec<RecordedBypass>,
    pub last_drift_at_secs: Option<u64>,
}

All recorded attempts and bypasses for ONE WAF rule.

Fields

rule_id: RuleId

Rule identifier the corpus is keyed on. Stored redundantly so a bucket extracted from the map stays self-describing.

description: Option<String>

Optional human-readable rule name when the WAF exposes one (e.g. CRS rule “942100 — SQL Injection Attack: Detected”).

blocked: Vec<RecordedAttempt>

Payloads that triggered this rule.

bypassed: Vec<RecordedBypass>

Payloads that bypassed this rule (passed through to origin).

last_drift_at_secs: Option<u64>

Epoch seconds of last detected ruleset drift — when CF Auto-Tune retrains, this updates and previously-blocked payloads become retry-eligible.

Trait Implementations

impl Clone for RuleBucket

fn clone(&self) -> RuleBucket

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuleBucket

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RuleBucket

fn default() -> RuleBucket

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RuleBucket

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for RuleBucket

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.