Module limits 

Available on crate feature masque only.

Shared admission accounting for MASQUE tunnels.

Structs

PrincipalKey

Who a MASQUE tunnel is accounted to: the key UserOrClientIpKey derives.

TunnelLease

A tunnel’s place among the proxy’s TunnelLimits, given back when dropped.

TunnelLimitReached

A tunnel limit was reached: total, per principal, or the principal map is full.

TunnelLimits

How many MASQUE tunnels a proxy runs: in total and per principal.

UserOrClientIpKey

The default InputToRateKey of TunnelLimits: the user an authentication layer in front identified; else the client IP, by ClientIpRateKey (an IPv6 client by its /64 by default, a Forwarded address only when a trusted layer set it); else PrincipalKey::ANONYMOUS. It always yields a key.