Layers: Layer 1: XDP/eBPF — TCP state machine, SYN throttle, blacklist, ringbuf Layer 2: PoW Challenge — SHA-256 hashcash, dynamic difficulty, constant-time verify Layer 3: Rust Core — HMAC handshake, rate limit, death code (existing) Layer 4: Velocity — Physics check, CAPTCHA, protocol verification Layer 5: Paper — Heartbeat, auto-registration (existing) Layer 6: Traffic Intel — EWMA, 168h profiling, reputation, alerts Infra: XDP→Prometheus metrics, ClickHouse + Grafana dashboard, Docker Compose Testing: 100-IP DDoS simulation, MHDDoS ref analysis, load test report Fixes: VarInt sign extension UB, pure ACK deadlock, RST/FIN cleanup Ref: MHDDoS, Sonar, LimboFilter, AtomGuard, Infrarust, MC-XDP-eBPF, PowGo
59 lines
1 KiB
TOML
59 lines
1 KiB
TOML
[graph]
|
|
targets = [
|
|
{ triple = "x86_64-unknown-linux-gnu" },
|
|
]
|
|
all-features = true
|
|
no-default-features = false
|
|
|
|
[output]
|
|
feature-depth = 1
|
|
|
|
[advisories]
|
|
ignore = []
|
|
|
|
[licenses]
|
|
allow = [
|
|
"MIT",
|
|
"Apache-2.0",
|
|
"Apache-2.0 WITH LLVM-exception",
|
|
"BSD-2-Clause",
|
|
"BSD-3-Clause",
|
|
"ISC",
|
|
"Unicode-3.0",
|
|
"Zlib",
|
|
"Unlicense",
|
|
"CC0-1.0",
|
|
"GPL-3.0",
|
|
"GPL-3.0-only",
|
|
"MPL-2.0",
|
|
]
|
|
confidence-threshold = 0.8
|
|
exceptions = []
|
|
|
|
[licenses.private]
|
|
ignore = true
|
|
|
|
[bans]
|
|
multiple-versions = "deny"
|
|
wildcards = "allow"
|
|
highlight = "all"
|
|
deny = []
|
|
skip = [
|
|
{ name = "hashbrown", version = "0.14" },
|
|
{ name = "socket2", version = "0.5" },
|
|
{ name = "syn", version = "2" },
|
|
{ name = "thiserror", version = "1" },
|
|
{ name = "thiserror-impl", version = "1" },
|
|
]
|
|
skip-tree = []
|
|
|
|
[sources]
|
|
unknown-registry = "warn"
|
|
unknown-git = "warn"
|
|
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
|
|
allow-git = []
|
|
|
|
[sources.allow-org]
|
|
github = []
|
|
gitlab = []
|
|
bitbucket = []
|