1// Copyright 2015 The Go Authors. All rights reserved. 2// Use of this source code is governed by a BSD-style 3// license that can be found in the LICENSE file. 4 5// Package rate provides a rate limiter. 6package rate 7 8import ( 9 "context" 10 "fmt" 11 "math" 12 "sync" 13 "time" 14) 15 16// Limit defines the maximum frequency of some events. 17// Limit is represented as number of events per second. 18// A zero Limit allows no events. 19type Limit float64 20 21// Inf is the infinite rate limit; it allows all events (even if burst is zero). 22const Inf = Limit(math.MaxFloat64) 23 24// Every converts a minimum time interval between events to a Limit. 25func Every(interval time.Duration) Limit { 26 if interval <= 0 { 27 return Inf 28 } 29 return 1 / Limit(interval.Seconds()) 30} 31 32// A Limiter controls how frequently events are allowed to happen. 33// It implements a "token bucket" of size b, initially full and refilled 34// at rate r tokens per second. 35// Informally, in any large enough time interval, the Limiter limits the 36// rate to r tokens per second, with a maximum burst size of b events. 37// As a special case, if r == Inf (the infinite rate), b is ignored. 38// See https://en.wikipedia.org/wiki/Token_bucket for more about token buckets. 39// 40// The zero value is a valid Limiter, but it will reject all events. 41// Use NewLimiter to create non-zero Limiters. 42// 43// Limiter has three main methods, Allow, Reserve, and Wait. 44// Most callers should use Wait. 45// 46// Each of the three methods consumes a single token. 47// They differ in their behavior when no token is available. 48// If no token is available, Allow returns false. 49// If no token is available, Reserve returns a reservation for a future token 50// and the amount of time the caller must wait before using it. 51// If no token is available, Wait blocks until one can be obtained 52// or its associated context.Context is canceled. 53// 54// The methods AllowN, ReserveN, and WaitN consume n tokens. 55type Limiter struct { 56 limit Limit 57 burst int 58 59 mu sync.Mutex 60 tokens float64 61 // last is the last time the limiter's tokens field was updated 62 last time.Time 63 // lastEvent is the latest time of a rate-limited event (past or future) 64 lastEvent time.Time 65} 66 67// Limit returns the maximum overall event rate. 68func (lim *Limiter) Limit() Limit { 69 lim.mu.Lock() 70 defer lim.mu.Unlock() 71 return lim.limit 72} 73 74// Burst returns the maximum burst size. Burst is the maximum number of tokens 75// that can be consumed in a single call to Allow, Reserve, or Wait, so higher 76// Burst values allow more events to happen at once. 77// A zero Burst allows no events, unless limit == Inf. 78func (lim *Limiter) Burst() int { 79 return lim.burst 80} 81 82// NewLimiter returns a new Limiter that allows events up to rate r and permits 83// bursts of at most b tokens. 84func NewLimiter(r Limit, b int) *Limiter { 85 return &Limiter{ 86 limit: r, 87 burst: b, 88 } 89} 90 91// Allow is shorthand for AllowN(time.Now(), 1). 92func (lim *Limiter) Allow() bool { 93 return lim.AllowN(time.Now(), 1) 94} 95 96// AllowN reports whether n events may happen at time now. 97// Use this method if you intend to drop / skip events that exceed the rate limit. 98// Otherwise use Reserve or Wait. 99func (lim *Limiter) AllowN(now time.Time, n int) bool { 100 return lim.reserveN(now, n, 0).ok 101} 102 103// A Reservation holds information about events that are permitted by a Limiter to happen after a delay. 104// A Reservation may be canceled, which may enable the Limiter to permit additional events. 105type Reservation struct { 106 ok bool 107 lim *Limiter 108 tokens int 109 timeToAct time.Time 110 // This is the Limit at reservation time, it can change later. 111 limit Limit 112} 113 114// OK returns whether the limiter can provide the requested number of tokens 115// within the maximum wait time. If OK is false, Delay returns InfDuration, and 116// Cancel does nothing. 117func (r *Reservation) OK() bool { 118 return r.ok 119} 120 121// Delay is shorthand for DelayFrom(time.Now()). 122func (r *Reservation) Delay() time.Duration { 123 return r.DelayFrom(time.Now()) 124} 125 126// InfDuration is the duration returned by Delay when a Reservation is not OK. 127const InfDuration = time.Duration(1<<63 - 1) 128 129// DelayFrom returns the duration for which the reservation holder must wait 130// before taking the reserved action. Zero duration means act immediately. 131// InfDuration means the limiter cannot grant the tokens requested in this 132// Reservation within the maximum wait time. 133func (r *Reservation) DelayFrom(now time.Time) time.Duration { 134 if !r.ok { 135 return InfDuration 136 } 137 delay := r.timeToAct.Sub(now) 138 if delay < 0 { 139 return 0 140 } 141 return delay 142} 143 144// Cancel is shorthand for CancelAt(time.Now()). 145func (r *Reservation) Cancel() { 146 r.CancelAt(time.Now()) 147 return 148} 149 150// CancelAt indicates that the reservation holder will not perform the reserved action 151// and reverses the effects of this Reservation on the rate limit as much as possible, 152// considering that other reservations may have already been made. 153func (r *Reservation) CancelAt(now time.Time) { 154 if !r.ok { 155 return 156 } 157 158 r.lim.mu.Lock() 159 defer r.lim.mu.Unlock() 160 161 if r.lim.limit == Inf || r.tokens == 0 || r.timeToAct.Before(now) { 162 return 163 } 164 165 // calculate tokens to restore 166 // The duration between lim.lastEvent and r.timeToAct tells us how many tokens were reserved 167 // after r was obtained. These tokens should not be restored. 168 restoreTokens := float64(r.tokens) - r.limit.tokensFromDuration(r.lim.lastEvent.Sub(r.timeToAct)) 169 if restoreTokens <= 0 { 170 return 171 } 172 // advance time to now 173 now, _, tokens := r.lim.advance(now) 174 // calculate new number of tokens 175 tokens += restoreTokens 176 if burst := float64(r.lim.burst); tokens > burst { 177 tokens = burst 178 } 179 // update state 180 r.lim.last = now 181 r.lim.tokens = tokens 182 if r.timeToAct == r.lim.lastEvent { 183 prevEvent := r.timeToAct.Add(r.limit.durationFromTokens(float64(-r.tokens))) 184 if !prevEvent.Before(now) { 185 r.lim.lastEvent = prevEvent 186 } 187 } 188 189 return 190} 191 192// Reserve is shorthand for ReserveN(time.Now(), 1). 193func (lim *Limiter) Reserve() *Reservation { 194 return lim.ReserveN(time.Now(), 1) 195} 196 197// ReserveN returns a Reservation that indicates how long the caller must wait before n events happen. 198// The Limiter takes this Reservation into account when allowing future events. 199// ReserveN returns false if n exceeds the Limiter's burst size. 200// Usage example: 201// r := lim.ReserveN(time.Now(), 1) 202// if !r.OK() { 203// // Not allowed to act! Did you remember to set lim.burst to be > 0 ? 204// return 205// } 206// time.Sleep(r.Delay()) 207// Act() 208// Use this method if you wish to wait and slow down in accordance with the rate limit without dropping events. 209// If you need to respect a deadline or cancel the delay, use Wait instead. 210// To drop or skip events exceeding rate limit, use Allow instead. 211func (lim *Limiter) ReserveN(now time.Time, n int) *Reservation { 212 r := lim.reserveN(now, n, InfDuration) 213 return &r 214} 215 216// Wait is shorthand for WaitN(ctx, 1). 217func (lim *Limiter) Wait(ctx context.Context) (err error) { 218 return lim.WaitN(ctx, 1) 219} 220 221// WaitN blocks until lim permits n events to happen. 222// It returns an error if n exceeds the Limiter's burst size, the Context is 223// canceled, or the expected wait time exceeds the Context's Deadline. 224// The burst limit is ignored if the rate limit is Inf. 225func (lim *Limiter) WaitN(ctx context.Context, n int) (err error) { 226 lim.mu.Lock() 227 burst := lim.burst 228 limit := lim.limit 229 lim.mu.Unlock() 230 231 if n > burst && limit != Inf { 232 return fmt.Errorf("rate: Wait(n=%d) exceeds limiter's burst %d", n, lim.burst) 233 } 234 // Check if ctx is already cancelled 235 select { 236 case <-ctx.Done(): 237 return ctx.Err() 238 default: 239 } 240 // Determine wait limit 241 now := time.Now() 242 waitLimit := InfDuration 243 if deadline, ok := ctx.Deadline(); ok { 244 waitLimit = deadline.Sub(now) 245 } 246 // Reserve 247 r := lim.reserveN(now, n, waitLimit) 248 if !r.ok { 249 return fmt.Errorf("rate: Wait(n=%d) would exceed context deadline", n) 250 } 251 // Wait if necessary 252 delay := r.DelayFrom(now) 253 if delay == 0 { 254 return nil 255 } 256 t := time.NewTimer(delay) 257 defer t.Stop() 258 select { 259 case <-t.C: 260 // We can proceed. 261 return nil 262 case <-ctx.Done(): 263 // Context was canceled before we could proceed. Cancel the 264 // reservation, which may permit other events to proceed sooner. 265 r.Cancel() 266 return ctx.Err() 267 } 268} 269 270// SetLimit is shorthand for SetLimitAt(time.Now(), newLimit). 271func (lim *Limiter) SetLimit(newLimit Limit) { 272 lim.SetLimitAt(time.Now(), newLimit) 273} 274 275// SetLimitAt sets a new Limit for the limiter. The new Limit, and Burst, may be violated 276// or underutilized by those which reserved (using Reserve or Wait) but did not yet act 277// before SetLimitAt was called. 278func (lim *Limiter) SetLimitAt(now time.Time, newLimit Limit) { 279 lim.mu.Lock() 280 defer lim.mu.Unlock() 281 282 now, _, tokens := lim.advance(now) 283 284 lim.last = now 285 lim.tokens = tokens 286 lim.limit = newLimit 287} 288 289// SetBurst is shorthand for SetBurstAt(time.Now(), newBurst). 290func (lim *Limiter) SetBurst(newBurst int) { 291 lim.SetBurstAt(time.Now(), newBurst) 292} 293 294// SetBurstAt sets a new burst size for the limiter. 295func (lim *Limiter) SetBurstAt(now time.Time, newBurst int) { 296 lim.mu.Lock() 297 defer lim.mu.Unlock() 298 299 now, _, tokens := lim.advance(now) 300 301 lim.last = now 302 lim.tokens = tokens 303 lim.burst = newBurst 304} 305 306// reserveN is a helper method for AllowN, ReserveN, and WaitN. 307// maxFutureReserve specifies the maximum reservation wait duration allowed. 308// reserveN returns Reservation, not *Reservation, to avoid allocation in AllowN and WaitN. 309func (lim *Limiter) reserveN(now time.Time, n int, maxFutureReserve time.Duration) Reservation { 310 lim.mu.Lock() 311 312 if lim.limit == Inf { 313 lim.mu.Unlock() 314 return Reservation{ 315 ok: true, 316 lim: lim, 317 tokens: n, 318 timeToAct: now, 319 } 320 } 321 322 now, last, tokens := lim.advance(now) 323 324 // Calculate the remaining number of tokens resulting from the request. 325 tokens -= float64(n) 326 327 // Calculate the wait duration 328 var waitDuration time.Duration 329 if tokens < 0 { 330 waitDuration = lim.limit.durationFromTokens(-tokens) 331 } 332 333 // Decide result 334 ok := n <= lim.burst && waitDuration <= maxFutureReserve 335 336 // Prepare reservation 337 r := Reservation{ 338 ok: ok, 339 lim: lim, 340 limit: lim.limit, 341 } 342 if ok { 343 r.tokens = n 344 r.timeToAct = now.Add(waitDuration) 345 } 346 347 // Update state 348 if ok { 349 lim.last = now 350 lim.tokens = tokens 351 lim.lastEvent = r.timeToAct 352 } else { 353 lim.last = last 354 } 355 356 lim.mu.Unlock() 357 return r 358} 359 360// advance calculates and returns an updated state for lim resulting from the passage of time. 361// lim is not changed. 362func (lim *Limiter) advance(now time.Time) (newNow time.Time, newLast time.Time, newTokens float64) { 363 last := lim.last 364 if now.Before(last) { 365 last = now 366 } 367 368 // Avoid making delta overflow below when last is very old. 369 maxElapsed := lim.limit.durationFromTokens(float64(lim.burst) - lim.tokens) 370 elapsed := now.Sub(last) 371 if elapsed > maxElapsed { 372 elapsed = maxElapsed 373 } 374 375 // Calculate the new number of tokens, due to time that passed. 376 delta := lim.limit.tokensFromDuration(elapsed) 377 tokens := lim.tokens + delta 378 if burst := float64(lim.burst); tokens > burst { 379 tokens = burst 380 } 381 382 return now, last, tokens 383} 384 385// durationFromTokens is a unit conversion function from the number of tokens to the duration 386// of time it takes to accumulate them at a rate of limit tokens per second. 387func (limit Limit) durationFromTokens(tokens float64) time.Duration { 388 seconds := tokens / float64(limit) 389 return time.Nanosecond * time.Duration(1e9*seconds) 390} 391 392// tokensFromDuration is a unit conversion function from a time duration to the number of tokens 393// which could be accumulated during that duration at a rate of limit tokens per second. 394func (limit Limit) tokensFromDuration(d time.Duration) float64 { 395 // Split the integer and fractional parts ourself to minimize rounding errors. 396 // See golang.org/issues/34861. 397 sec := float64(d/time.Second) * float64(limit) 398 nsec := float64(d%time.Second) * float64(limit) 399 return sec + nsec/1e9 400} 401