BE-71: Adaptive Rate Limiting Filter for Socket Move Injection & DoS Mitigation

[chinweobtagaz]

Problem Statement

Malicious actors could flood the WebSocket server with illegal move packets or rapid ping frames, degrading server performance.

Proposed Solution

1. Implement token bucket rate limiter per active WebSocket session in Actix actor.
2. Allow maximum 10 client frames per second with burst allowance of 20.
3. Automatically terminate connection and issue temporary cooldown on repeated violations.

Acceptance Criteria

• Rapid spam packets dropped before reaching chess engine validation logic.
• Legitimate premove bursts handled smoothly without false-positive disconnects.
• Metrics for dropped frames exported to Prometheus.

[pope4]

@pope4 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi, I've gone over the issue details carefully and I'm confident I can put together a clean, efficient fix.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @pope4 to this issue.

[doctorlight0]

@doctorlight0 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Dear Maintainer, I’m humbly asking to be given this opportunity. I’m ready to put in the necessary effort and deliver a proper solution. I would genuinely appreciate your consideration.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @doctorlight0 to this issue.

[Affluence-19]

@Affluence-19 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I would love to work on this issue, please maintainer assign

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Affluence-19 to this issue.