4 Commits

Author	SHA1	Message	Date
glm-5.1	cf3f00fc53	fix(token-bucket-field-visibility): make TokenBucket fields private except last_access	2026-06-12 14:32:29 +00:00
glm-5.1	a701c82c90	fix: use nanosecond precision in token bucket refill calculation	2026-06-12 04:21:53 +00:00
glm-5.1	2791070971	Implement token bucket rate limiting with IPv6 /64 normalization ... - Add TokenBucket with nodelay semantics (nginx limit_req burst nodelay) - Per-IP rate limiting: IPv4 /32, IPv6 /64 prefix normalization - DashMap for concurrent access, ArcSwap for lock-free config reads - Background eviction task for stale entry cleanup - 429 response with plain text body, RATE_LIMIT log prefix - Config reload adopts new rate/burst on next request without clearing state - Unit tests for bucket algorithm and IPv6 normalization - Integration tests for 429 responses and per-IP independence	2026-06-11 13:01:25 +00:00
glm-5.1	97178800f9	Initialize Rust project with Cargo, dependencies, and module skeleton ... Set up single-binary reverse-proxy project with all core dependencies (axum, tokio, hyper, tower, rustls, tokio-rustls, rustls-acme, serde, toml, arc-swap, tracing, tracing-subscriber, rustls-pemfile, rustls-pki-types, clap, signal-hook, anyhow, thiserror) pinned to exact versions. Create module skeleton (config, proxy, tls, rate_limit, logging, admin, health, shutdown) matching architecture spec.	2026-06-11 11:34:53 +00:00