Struct PixReconstructorConfig 

pub struct PixReconstructorConfig {
    pub incomplete_commitment_lifetime: Duration,
    pub unused_verifier_lifetime: Duration,
    pub max_tracked_peers: usize,
    pub max_awaiting_acks: usize,
    pub max_ack_await_time: Duration,
    pub use_batch_verification: bool,
    pub early_recovery_threshold: f64,
    pub max_ack_buffer_bytes: usize,
}

Operator-facing mirror of SsaReconstructorConfig, the Exit-side share reconstructor.

Stands in the same relationship to the protocol type that the fields of PixGlobalConfig stand in to SsaGeneratorConfig: hopr-protocol-pix owns the type the reconstructor is built from, and this crate owns the shape an operator writes. It exists because none of these seven values was reachable from a config file at all — both production constructors took SsaReconstructorConfig::default(), so the Exit side of PIX was unconfigurable while the Entry side was not.

Duplicating seven fields is the price of the mirror, and two guards pay it. The From impl below is written exhaustively, so a field added to SsaReconstructorConfig fails to compile until it is mirrored here; and pix_reconstructor_mirror_matches_the_protocol_defaults asserts the two default sets still agree. Validation is not duplicated at all — see validate_pix_reconstructor_config.

Each field’s rationale lives on the protocol type and is linked rather than copied, since a third copy of the same prose is a third thing to keep true.

Fields

incomplete_commitment_lifetime: Duration

Time until the complete commitment to an SSA must be received.

Defaults to 2 minutes. See SsaReconstructorConfig::incomplete_commitment_lifetime.

unused_verifier_lifetime: Duration

Maximum time an SSA cycle can go without progress before it is discarded.

Defaults to 30 minutes. See SsaReconstructorConfig::unused_verifier_lifetime.

max_tracked_peers: usize

Maximum number of peers tracked simultaneously with unacknowledged shares.

Defaults to 2000, minimum 10. See SsaReconstructorConfig::max_tracked_peers.

max_awaiting_acks: usize

Maximum number of awaited acknowledgements held per peer.

Defaults to 1 000 000, minimum 10 000. See SsaReconstructorConfig::max_awaiting_acks.

max_ack_await_time: Duration

Maximum time an acknowledgement is awaited before its share is discarded.

Defaults to 30 seconds. See SsaReconstructorConfig::max_ack_await_time.

use_batch_verification: bool

Whether to use the batch verification algorithm for acknowledgements.

Defaults to false. See SsaReconstructorConfig::use_batch_verification, which records the measurements behind that default and why the knob was kept rather than removed.

early_recovery_threshold: f64

Fraction of reconstructed polynomials at which an early recovery notification is emitted.

Defaults to 0.85, range 0.0..=1.0. See SsaReconstructorConfig::early_recovery_threshold.

max_ack_buffer_bytes: usize

Ceiling on the total awaiting-acknowledgement state held across every peer, in bytes.

Defaults to 1 GiB, minimum 25 600 B — 64 entries at the measured per-entry cost. That floor is a sanity check rather than a sizing recommendation; see SsaReconstructorConfig::max_ack_buffer_bytes, which is where it is enforced and why it is deliberately low.

This — not the product of max_tracked_peers and max_awaiting_acks — is what bounds the reconstructor’s acknowledgement buffer, and the reconstructor enforces it as shares arrive rather than checking a workload model here. A model would have to assume a Session count and a packet rate; maximum_managed_sessions validates to 100 000 and SessionCapability::NoRateControl removes the rate limiter, so neither assumption survives contact with a legal configuration.

Trait Implementations

impl Clone for PixReconstructorConfig

fn clone(&self) -> PixReconstructorConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PixReconstructorConfig

impl Debug for PixReconstructorConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PixReconstructorConfig

fn default() -> Self

Return PixReconstructorConfig { incomplete_commitment_lifetime: SsaReconstructorConfig::DEFAULT_INCOMPLETE_COMMITMENT_LIFETIME, unused_verifier_lifetime: SsaReconstructorConfig::DEFAULT_UNUSED_VERIFIER_LIFETIME, max_tracked_peers: SsaReconstructorConfig::DEFAULT_MAX_TRACKED_PEERS, max_awaiting_acks: SsaReconstructorConfig::DEFAULT_MAX_AWAITING_ACKS, max_ack_await_time: SsaReconstructorConfig::DEFAULT_MAX_ACK_AWAIT_TIME, use_batch_verification: SsaReconstructorConfig::DEFAULT_USE_BATCH_VERIFICATION, early_recovery_threshold: SsaReconstructorConfig::DEFAULT_EARLY_RECOVERY_THRESHOLD, max_ack_buffer_bytes: SsaReconstructorConfig::DEFAULT_MAX_ACK_BUFFER_BYTES }

impl From<PixReconstructorConfig> for SsaReconstructorConfig

fn from(cfg: PixReconstructorConfig) -> Self

Both sides are written out exhaustively, with no ..Default::default() on either.

That is the guard the mirror rests on: a field added to SsaReconstructorConfig leaves this initialiser incomplete and a field added to PixReconstructorConfig leaves the pattern incomplete, so either one fails to compile until it is mirrored. Struct update syntax would compile in both directions and silently pin the new knob to its default.

impl PartialEq for PixReconstructorConfig

fn eq(&self, other: &PixReconstructorConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PixReconstructorConfig

impl Validate for PixReconstructorConfig

fn validate(&self) -> Result<(), ValidationErrors>

impl<'v_a> ValidateArgs<'v_a> for PixReconstructorConfig

type Args = ()

fn validate_with_args(&self, args: Self::Args) -> Result<(), ValidationErrors>