Anti-DDoS enhancements: Log to net log, UMA stats, improved policy.

net/base/backoff_entry.h

Index: net/base/backoff_entry.h
diff --git a/net/base/backoff_entry.h b/net/base/backoff_entry.h
index 1a7d2dcde0b743cc2a35e37b50036c3eafb7f1f5..f08564b65be072aaa6710ffe2d902ac418a54e5b 100644
--- a/net/base/backoff_entry.h
+++ b/net/base/backoff_entry.h
@@ -69,10 +69,15 @@ class NET_TEST BackoffEntry : NON_EXPORTED_BASE(public base::NonThreadSafe) {
   // had for Policy::entry_lifetime_ms_.
   bool CanDiscard() const;
 
+  // Resets this entry to a fresh (as if just constructed) state.
+  void Reset();
+
+  // Returns the failure count for this entry.
+  int failure_count() const;

[wtc, 2011/05/25 23:12:06]

Nit: define this getter inline?

[Jói, 2011/05/26 14:53:42]

Done.

+
  protected:
   // Equivalent to TimeTicks::Now(), virtual so unit tests can override.
-  // TODO(joi): Switch to constructor-time dependency injection?
-  virtual base::TimeTicks GetTimeNow() const;
+  virtual base::TimeTicks ImplGetTimeNow() const;

[wtc, 2011/05/25 23:12:06]

Nit: we usually put "Impl" at the end, so "GetTimeNowImpl"?

[Jói, 2011/05/26 14:53:42]

I've been using Impl at the front for methods intended for unit tests to
override. Will leave as-is in this change, but if you think it's best, I can go
through (these files and several others) and rename these methods so that Impl
is at the end.

 
  private:
   // Calculates when requests should again be allowed through.