Module rate_limit 

Token-bucket rate limiting middleware for the Kroki-rs server.

Implements per-IP rate limiting using a concurrent DashMap for O(1) lookups. When server.rate_limit.enabled = false (default), all requests pass through.

Structs

RateLimiter

Shared rate limiter state keyed by client IP.

TokenBucket 🔒

A token bucket for a single client IP.

Functions

extract_client_ip 🔒

Extracts the client IP from the request. Checks X-Forwarded-For first (for reverse proxy setups), then falls back to X-Real-IP, and finally defaults to 127.0.0.1.

rate_limit_middleware

Axum middleware that enforces rate limits.