bneradt opened a new pull request, #13816: URL: https://github.com/apache/trafficserver/pull/13816
Tracker entries with token debt are protected from eviction, but debt was read from the stored balance, which only replenishes on the next consume. An IP that went into debt and then stopped sending, or a bucket left behind by a removed rule, stayed in debt indefinitely and pinned one of the ip_tracking.slots. Over time this shrinks effective tracker capacity and raises events_untracked and scan_exhausted. This patch addresses this by having each token bucket remember the rate and burst of its latest consume, so token reads report the time-replenished balance without mutating bucket state. Debt checks, rate-exceeded checks, and logged token counts all use this view, so genuinely abusive IPs remain protected while quiet ones become evictable once their debt is repaid. This also makes a missed prune of obsolete rule buckets harmless. Co-authored-by: Claude Opus 5.5 Medium -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
