Drop-in components that protect your Delphi servers from abuse, overload and cascading upstream failure. Every component snaps into TsgcWebSocketHTTPServer or TsgcWSServer_HTTPAPI through a single property — no event wiring required.
Combine the firewall, circuit breaker, rate limiter and API key manager to harden any sgcWebSockets server.
Fifteen protection modules in one component — IP blacklist/whitelist, brute-force banning, SQL injection, XSS, GeoIP, threat scoring, payload limits and more.
Three-state machine (closed → open → half-open) that fails fast when an upstream API stops responding. Drops in next to OpenAI, Stripe, Anthropic and any TsgcHTTPAPI client.
Token Bucket, Sliding Window and Fixed Window strategies scoped per IP, API key, user or endpoint. HTTP 429 response with Retry-After and X-RateLimit-* headers.
Issue, rotate and revoke API keys with SHA-256/512/Bcrypt at rest, scope-based authorization, rotation grace periods, IP allowlists and a tamper-resistant audit log.
Every resilience component is fully thread-safe, persists state across restarts and exposes live statistics for dashboards.
Drop the component on your form, configure the desired protections in the object inspector, and assign it to the server's Firewall / RateLimiter / APIKeyManager / CircuitBreaker property. The server takes care of every connection and every message automatically — no event handlers needed for the common case.