mirror of https://github.com/jmcorgan/fips.git synced 2026-07-22 07:48:26 +00:00

Go to file

Johnathan Corgan 5f1c6c2c7c Add session idle timeout (90s) and identity cache expiry (60s)

Sessions in the Established state that have no activity for 90 seconds
are now automatically removed. This ensures idle sessions are torn down
before transit node coord_cache entries expire (300s TTL), so that when
traffic resumes a fresh SessionSetup re-warms transit node caches with
current coordinates.

The identity cache now stores registration timestamps and expires
entries after 60 seconds via lazy expiry on lookup. This prevents
unbounded growth while allowing natural repopulation through DNS
resolution on next use.

Timer ordering: identity (60s) < session (90s) < coord_cache (300s).

Both timeouts are configurable: node.session.idle_timeout_secs and
node.cache.identity_ttl_secs. Setting idle_timeout_secs to 0 disables
session idle purging.

Changes:
- Add idle_timeout_secs (default 90) to SessionConfig
- Add identity_ttl_secs (default 60) to CacheConfig
- Add timestamp to identity_cache entries, lazy expiry on lookup
- Add purge_idle_sessions() called from tick loop
- Remove #[cfg(test)] from SessionEntry::last_activity()
- 7 new tests covering timeout behavior and edge cases

2026-02-16 13:13:05 +00:00

benches

Bloom module test coverage, benchmarks, and design doc corrections

2026-02-15 16:05:59 +00:00

docs

Module reorganization, identity test coverage, design doc corrections

2026-02-15 17:11:58 +00:00

examples/docker-network

MacOS shenenigans, add cross-compilation support for example

2026-02-14 18:13:16 -03:00

src

Add session idle timeout (90s) and identity cache expiry (60s)