Layers: Layer 1: XDP/eBPF — TCP state machine, SYN throttle, blacklist, ringbuf Layer 2: PoW Challenge — SHA-256 hashcash, dynamic difficulty, constant-time verify Layer 3: Rust Core — HMAC handshake, rate limit, death code (existing) Layer 4: Velocity — Physics check, CAPTCHA, protocol verification Layer 5: Paper — Heartbeat, auto-registration (existing) Layer 6: Traffic Intel — EWMA, 168h profiling, reputation, alerts Infra: XDP→Prometheus metrics, ClickHouse + Grafana dashboard, Docker Compose Testing: 100-IP DDoS simulation, MHDDoS ref analysis, load test report Fixes: VarInt sign extension UB, pure ACK deadlock, RST/FIN cleanup Ref: MHDDoS, Sonar, LimboFilter, AtomGuard, Infrarust, MC-XDP-eBPF, PowGo
43 lines
1.2 KiB
TOML
43 lines
1.2 KiB
TOML
[package]
|
|
name = "rampart-core"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[dependencies]
|
|
tokio.workspace = true
|
|
serde.workspace = true
|
|
serde_json.workspace = true
|
|
tracing.workspace = true
|
|
tracing-subscriber.workspace = true
|
|
thiserror.workspace = true
|
|
anyhow.workspace = true
|
|
dashmap.workspace = true
|
|
crossbeam.workspace = true
|
|
hex.workspace = true
|
|
sha2.workspace = true
|
|
rand.workspace = true
|
|
hmac.workspace = true
|
|
subtle.workspace = true
|
|
socket2 = { workspace = true, features = ["all"] }
|
|
prometheus.workspace = true
|
|
toml.workspace = true
|
|
futures.workspace = true
|
|
chrono = { workspace = true, features = ["serde"] }
|
|
reqwest = { version = "0.12", default-features = false, features = ["rustls-tls"] }
|
|
|
|
redis = { version = "0.27", optional = true, features = ["tokio-comp"] }
|
|
maxminddb = { version = "0.30", optional = true }
|
|
tokio-splice = { version = "0.2", optional = true }
|
|
libbpf-rs = { version = "0.24", optional = true }
|
|
libc = { version = "0.2", optional = true }
|
|
|
|
[features]
|
|
default = ["store-redis"]
|
|
store-redis = ["dep:redis"]
|
|
geoip = ["dep:maxminddb"]
|
|
xdp = ["dep:libbpf-rs", "dep:libc"]
|
|
io-uring = ["dep:tokio-splice"]
|