Method check_rate_limits

src/protocol/rate_limiter.rs:514–563

Check rate limits

(&self, client_ip: Option<IpAddr>)

    /// Check rate limits
    fn check_rate_limits(&self, client_ip: Option<IpAddr>) -> Result<(), RateLimitError> {
        // If per-IP limiting is enabled and we have an IP, check per-IP limits
        if self.rate_config.per_ip_limiting {
            if let Some(ip) = client_ip {
                let mut ip_windows = self.ip_windows.write();

                // Check if we're tracking too many IPs
                if ip_windows.len() >= self.rate_config.max_tracked_ips && !ip_windows.contains_key(&ip) {
                    warn!("Too many IP addresses being tracked, falling back to global rate limiting for {}", ip);
                    // Fall through to global rate limiting
                } else {
                    let window = ip_windows.entry(ip).or_insert_with(RateLimitWindow::new);

                    let (requests, _was_reset) = window.check_and_increment(self.rate_config.window_duration);
                    if requests > self.rate_config.max_requests {
                        // Log rate limit exceeded event
                        events::rate_limit_exceeded(Some(ip), "per-ip", requests);

                        return Err(RateLimitError::RateLimitExceeded(
                            format!("Per-IP rate limit exceeded for {}: {} requests per {} seconds",
                                ip,
                                self.rate_config.max_requests,
                                self.rate_config.window_duration.as_secs())
                        ));
                    }

                    // Per-IP limit passed, no need to check global limit
                    return Ok(());
                }
            }
        }

        // Check global rate limit (only if per-IP limiting is disabled or IP tracking is full)
        {
            let global_window = self.global_window.read();
            let (requests, _was_reset) = global_window.check_and_increment(self.rate_config.window_duration);
            if requests > self.rate_config.max_requests {
                // Log rate limit exceeded event
                events::rate_limit_exceeded(client_ip, "global", requests);

                return Err(RateLimitError::RateLimitExceeded(
                    format!("Global rate limit exceeded: {} requests per {} seconds",
                        self.rate_config.max_requests,
                        self.rate_config.window_duration.as_secs())
                ));
            }
        }

        Ok(())
    }

    /// Clean up expired rate limit windows
    fn maybe_cleanup(&self) {