Module ratelimit 

Verification-request limits keyed by source and destination.

Separate token buckets protect the caller-IP and target-address axes. Their state is process-local, bounded in size, and reset when the service restarts.

Constants

RATELIMIT_MAP_CAP 🔒

Cap on each bucket table; fully refilled buckets are pruned past it so a spray cannot grow the table without bound.

RC_BURST 🔒

RC_PER_SECOND 🔒

Refills per second on each requestToken bucket; a generous burst absorbs a real client’s retries while bounding sustained spray.

Functions

check_bucket 🔒

check_bucket_at 🔒

debit_bucket 🔒