Documentation
¶
Index ¶
- Variables
- func GetBuffer() *[]byte
- func NewSingleConnListener(conn net.Conn) net.Listener
- func PeekHTTPHostAndPrelude(conn net.Conn, timeout time.Duration, maxPrelude int) (host string, path string, prelude []byte, err error)
- func PeekSNIAndPrelude(conn net.Conn, timeout time.Duration, maxPrelude int) (string, []byte, error)
- func PutBuffer(buf *[]byte)
- func WithPrelude(conn net.Conn, prelude []byte) net.Conn
- type Client
- type Listener
- type PausableConn
- type SingleConnListener
Constants ¶
This section is empty.
Variables ¶
var ( ErrNotHTTP = errors.New("not an http/1.x request") ErrHTTPPreludeTooLarge = errors.New("http prelude exceeds limit") )
var ErrMissingSNI = errors.New("missing sni in clienthello")
ErrMissingSNI indicates a valid TLS ClientHello without an SNI value.
Functions ¶
func NewSingleConnListener ¶
NewSingleConnListener creates a new SingleConnListener.
func PeekHTTPHostAndPrelude ¶
func PeekHTTPHostAndPrelude(conn net.Conn, timeout time.Duration, maxPrelude int) (host string, path string, prelude []byte, err error)
PeekHTTPHostAndPrelude uses net/http to parse the request line and headers to extract the Host and Path, while teeing all bytes read so they can be replayed to the backend as a prelude. It limits time via deadline; maximum header size is enforced by http.ReadRequest and the outer deadline.
func PeekSNIAndPrelude ¶
func PeekSNIAndPrelude(conn net.Conn, timeout time.Duration, maxPrelude int) (string, []byte, error)
PeekSNIAndPrelude reads only as much as needed to obtain the SNI from the incoming TLS ClientHello using crypto/tls, capturing the bytes that were read so they can be replayed to the chosen backend. It returns the server name (lowercased) and the captured prelude. If the connection is not TLS or the handshake is malformed, an error is returned.
func WithPrelude ¶
WithPrelude returns a net.Conn whose Read will yield prelude first, then the remaining bytes from conn. Useful when an earlier sniff consumed bytes that should still be visible to a protocol handler (e.g., serving ACME HTTP).
Types ¶
type Client ¶
type Client struct {
// contains filtered or unexported fields
}
Client represents a single connection from an end-user.
func NewClient ¶
func NewClient(conn net.Conn, backend iface.Backend, cfg *config.Config, hostname string, isTLS bool) *Client
NewClient creates a new client handler.
func NewClientWithPrelude ¶
func NewClientWithPrelude(conn net.Conn, backend iface.Backend, cfg *config.Config, hostname string, initial []byte, isTLS bool) *Client
NewClientWithPrelude is like NewClient, but will send the provided initial bytes to the backend immediately after establishing the client association before streaming any further data read from conn. Useful when earlier sniff logic consumed and recorded initial bytes (e.g., TLS ClientHello or HTTP headers).
type Listener ¶
type Listener struct {
// contains filtered or unexported fields
}
Listener is responsible for accepting incoming connections from end-users.
type PausableConn ¶
PausableConn wraps a net.Conn with pause/resume capability. When paused, Read() blocks until Resume() is called or Close() is called.
func NewPausableConn ¶
func NewPausableConn(conn net.Conn) *PausableConn
NewPausableConn wraps an existing connection.
func (*PausableConn) Close ¶
func (pc *PausableConn) Close() error
Close unblocks waiting readers and closes the underlying connection.
func (*PausableConn) IsPaused ¶
func (pc *PausableConn) IsPaused() bool
IsPaused returns the current pause state.
func (*PausableConn) Pause ¶
func (pc *PausableConn) Pause()
Pause signals reads should block. Idempotent. No-op if already closed.
func (*PausableConn) Read ¶
func (pc *PausableConn) Read(b []byte) (int, error)
Read blocks if paused, then delegates to underlying conn.
func (*PausableConn) Resume ¶
func (pc *PausableConn) Resume()
Resume signals reads can proceed. Idempotent. No-op if already closed.
func (*PausableConn) Unwrap ¶
func (pc *PausableConn) Unwrap() net.Conn
Unwrap returns the underlying net.Conn for low-level TCP operations such as half-close (CloseWrite).
type SingleConnListener ¶
type SingleConnListener struct {
// contains filtered or unexported fields
}
SingleConnListener is a net.Listener that exposes exactly one pre-existing connection to an http.Server. It returns the connection once from Accept. Subsequent Accept calls block until the connection is closed, then return net.ErrClosed. This prevents premature server shutdown races.
func (*SingleConnListener) Accept ¶
func (l *SingleConnListener) Accept() (net.Conn, error)
Accept returns the connection on the first call. On subsequent calls it blocks until the connection is closed, then returns net.ErrClosed.
func (*SingleConnListener) Addr ¶
func (l *SingleConnListener) Addr() net.Addr
Addr returns the single connection's local address.
func (*SingleConnListener) Close ¶
func (l *SingleConnListener) Close() error
Close closes the underlying connection and unblocks any Accept waiters.
Source Files