filter

type Backend interface {
	IsPortGuarded(ctx context.Context, port uint16) (bool, error)
	InsertPending(ctx context.Context, ip net.IP, port uint16, window time.Duration) error
	Stats(ctx context.Context) (Counters, error)
	FlushAuthorizations(ctx context.Context) (FlushResult, error)

	// работает только в режиме отладки
	VerifyPending(ctx context.Context, ip net.IP, port uint16) error
}

type Counters struct {
	Allowed                uint64 `json:"allowed"`
	Dropped                uint64 `json:"dropped"`
	SYNAllowed             uint64 `json:"syn_allowed"`
	SYNDropped             uint64 `json:"syn_dropped"`
	ActiveFlowHits         uint64 `json:"active_flow_hits"`
	PendingPromotions      uint64 `json:"pending_promotions"`
	PendingExpiredCleanups uint64 `json:"pending_expired_cleanups"`
	IPPortAuthHits         uint64 `json:"ip_port_auth_hits"`
	NonGuardedPortAllowed  uint64 `json:"non_guarded_port_allowed"`
	GuardedPortDropped     uint64 `json:"guarded_port_dropped"`
}

type FlushResult struct {
	PendingEntriesRemoved uint64 `json:"pending_entries_removed"`
	ActiveFlowsRemoved    uint64 `json:"active_flows_removed"`
}

type Options struct {
	Window time.Duration
	Debug  bool
	Now    func() time.Time
}

type RuntimeConfigurator interface {
	ConfigureRuntime(backend Backend, window time.Duration) error
}

type Service struct {
	// contains filtered or unexported fields
}

type Stats struct {
	Counters

	AllowRatePercent float64 `json:"allow_rate_percent"`
	DropRatePercent  float64 `json:"drop_rate_percent"`
}

type UseCase interface {
	Allow(ctx context.Context, ip net.IP, port uint16) (expires time.Time, err error)
	Stats(ctx context.Context) (Stats, error)
	BlockAll(ctx context.Context) (FlushResult, error)
}