auth_lockout.cpp File Reference

Per-peer brute-force lockout state machine (DETWS_ENABLE_AUTH_LOCKOUT). More...

#include "auth_lockout.h"

Go to the source code of this file.

Detailed Description

Per-peer brute-force lockout state machine (DETWS_ENABLE_AUTH_LOCKOUT).

A bounded BSS table of buckets keyed by the source address (a DetIp, so IPv4 and IPv6 peers are each their own bucket - never a lossy hash that a colliding address could poison). Each bucket holds the consecutive-failure count and, once the threshold is crossed, the start and duration of the current lockout (exponential backoff, capped). Compiled only when DETWS_ENABLE_AUTH_LOCKOUT is set; the host unit tests enable it.

Definition in file auth_lockout.cpp.