Struct DdosConnectionGuard 

pub struct DdosConnectionGuard { /* private fields */ }

RAII guard for a single IP’s connection slot.

Created by DdosConnectionGuard::try_new; dropped when the connection ends. While alive it holds a slot in the per-IP connection counter. Exposes allow_request and report_bad_request so callers never need to pass a raw Arc<dyn DdosProtection> through request handling code.

Implementations

impl DdosConnectionGuard

pub fn try_new( ddos: Arc<dyn DdosProtection>, ip: impl Into<String>, ) -> Option<Self>

Try to acquire a connection slot for ip.

Returns None if the IP is over the per-IP connection cap or is already rate-limited. Returns Some(guard) on success; the slot is released automatically when the guard is dropped.

pub fn ip(&self) -> &str

pub fn allow_request(&self) -> bool

Returns true if the next request from this connection should be processed.

pub fn report_bad_request(&self)

Report that a request from this connection was malformed or malicious.

Trait Implementations

impl Drop for DdosConnectionGuard

fn drop(&mut self)

Executes the destructor for this type.