ratelimitml

type AnomalyDetector struct {
	// contains filtered or unexported fields
}

type AnomalyEvent struct {
	Timestamp   time.Time
	Score       float64
	Type        string
	Description string
	Action      string
}

type BehaviorPrediction struct {
	PredictedRate  float64
	PredictedSpike float64
	Confidence     float64
	TimeHorizon    time.Duration
}

type CoordinatedAttack struct {
	IPs       []string
	StartTime time.Time
	Type      string
}

type Decision struct {
	Block      bool
	Reason     string
	Confidence float64
	Duration   time.Duration
	Escalation int
}

type HistoricalData struct {
	Timestamp time.Time
	Rate      float64
	Pattern   string
}

type IsolationForest struct {
	Trees         []*IsolationTree
	NumTrees      int
	SampleSize    int
	MaxDepth      int
	FeatureNames  []string
	AnomalyScores map[string]float64 // Cache for recent scores
}

type IsolationNode struct {
	IsLeaf       bool
	SplitFeature int
	SplitValue   float64
	Left         *IsolationNode
	Right        *IsolationNode
	Size         int // Number of samples at this node
}

type IsolationTree struct {
	Root       *IsolationNode
	PathLength map[string]float64
}

type MLBlock struct {
	ClientIP   string
	Reason     string
	Duration   time.Duration
	Escalation int
	AppliedAt  time.Time
}

type MLMetrics struct {
	AnomaliesDetected int64
	PredictionsMade   int64
	ModelUpdates      int64
	TruePositives     int64
	FalsePositives    int64
	// contains filtered or unexported fields
}

type MLRateLimitConfig struct {
	Enabled              bool    `json:"enabled"`
	ModelPath            string  `json:"modelPath"`
	AnomalyThreshold     float64 `json:"anomalyThreshold"`
	PredictionWindow     string  `json:"predictionWindow"`
	LearningEnabled      bool    `json:"learningEnabled"`
	CoordinationEnabled  bool    `json:"coordinationEnabled"`
	BlockDuration        string  `json:"blockDuration"`
	EscalationMultiplier float64 `json:"escalationMultiplier"`
}

type NormalProfile struct {
	ClientIP         string
	AverageRate      float64
	StdDeviation     float64
	PeakHours        []int
	TypicalEndpoints map[string]float64
	UserAgent        string
	LastSeen         time.Time
}

type PatternAnalyzer struct {
	// contains filtered or unexported fields
}

type RateLimitCoordinator struct {
	// contains filtered or unexported fields
}

type RateLimitMLPlugin struct {
	// contains filtered or unexported fields
}

type TimeWindow struct {
	Start    time.Time
	End      time.Time
	Requests int
	Unique   int
}

type TrafficAnomaly struct {
	Type        string
	Severity    string
	Description string
}

type TrafficPattern struct {
	ClientIP       string
	RequestRate    float64
	BurstPattern   []int
	Periodicity    float64
	Entropy        float64
	EntropyScore   float64 // Alias for Entropy
	Predictability float64
	AnomalyScore   float64
	IsAnomalous    bool
	LastUpdated    time.Time
}

type TrafficPredictor struct {
	// contains filtered or unexported fields
}