Slyghtning a3ee1e0d17 proxy: implement a token-bucket rate limiter for aperture ...

Implement a token-bucket rate limiter for aperture that limits requests
per service endpoint. The rate limiter uses golang.org/x/time/rate and
provides per-key limiting with L402 token ID extraction (falling back
to IP address for unauthenticated requests).

Key components:
- RateLimitConfig: Configuration struct with path regex, requests/per/burst
- RateLimiter: Manages per-key rate.Limiter instances with LRU eviction
  to prevent memory exhaustion (default 10,000 entries)
- Prometheus metrics: allowed/denied counters, cache size, evictions

This addresses GitHub issue #200 for DoS protection on authenticated
endpoints that are free of charge after L402 payment.

2026-01-23 09:05:55 -05:00

..

testdata

proxy+pricesrpc: fix RPC check by bumping Golang version

2025-08-07 11:11:29 +02:00

log.go

multi: update btclog, lnd and lndclient deps

2025-03-05 11:12:29 +02:00

proxy_test.go

proxy: add skipping invoice creation on request

2025-05-15 08:41:03 +02:00

proxy.go

proxy: add skipping invoice creation on request

2025-05-15 08:41:03 +02:00

ratelimit_config.go

proxy: implement a token-bucket rate limiter for aperture

2026-01-23 09:05:55 -05:00

ratelimit_metrics.go

proxy: implement a token-bucket rate limiter for aperture

2026-01-23 09:05:55 -05:00

ratelimiter.go

proxy: implement a token-bucket rate limiter for aperture

2026-01-23 09:05:55 -05:00

service.go

linter: fix lint issues after linter v2 update

2025-08-20 14:42:42 +02:00