v1.17: Connection rate limiting (backport of #948)

[mergify]

Problem

A client can be abusive and create the connections too fast to over load the server. Even we have per connection limit, it involves more heavy operations like taking lock in the connection table and evicting other connections. Also, a lot of different clients can collectively create too many connections too fast to overwhelm the server. This is observed especially in around the the time when the node becomes a leader.

Summary of Changes

Introduce connection rate limiter.

Limit connection rates from a single IP to 8/minutes

Limit the global connection rate to 2500/second -- 2500 is estimated from the default connection cache table size which is generous.

Fixes #

---

This is an automatic backport of pull request #948 done by [Mergify](https://mergify.com).

[mergify]

Cherry-pick of f54c120 has failed:

On branch mergify/bp/v1.17/pr-948
Your branch is up to date with 'origin/v1.17'.

You are currently cherry-picking commit f54c120450.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   Cargo.lock
	modified:   bench-tps/src/cli.rs
	modified:   core/src/tpu.rs
	modified:   core/src/validator.rs
	modified:   local-cluster/src/local_cluster.rs
	modified:   programs/sbf/Cargo.lock
	modified:   streamer/Cargo.toml
	new file:   streamer/src/nonblocking/connection_rate_limiter.rs
	new file:   streamer/src/nonblocking/keyed_rate_limiter.rs
	modified:   streamer/src/nonblocking/mod.rs
	new file:   streamer/src/nonblocking/rate_limiter.rs
	modified:   test-validator/src/lib.rs
	modified:   validator/src/main.rs

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   client/src/connection_cache.rs
	both modified:   quic-client/tests/quic_client.rs
	both modified:   streamer/src/nonblocking/quic.rs
	both modified:   streamer/src/quic.rs
	both modified:   validator/src/cli.rs

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 86.04651% with 24 lines in your changes are missing coverage. Please review.

Project coverage is 81.6%. Comparing base (254eccd) to head (bcdaa89).

Additional details and impacted files

@@           Coverage Diff            @@
##            v1.17    #1361    +/-   ##
========================================
  Coverage    81.6%    81.6%            
========================================
  Files         807      810     +3     
  Lines      219370   219541   +171     
========================================
+ Hits       179087   179235   +148     
- Misses      40283    40306    +23     

[CriesofCarrots]

v1.17 is EOL