frpsvc

type Frps struct {
	// Control serves frp control's WebSocket, which httpsvc hands it
	// once it has checked the dark node's certificate: the upgraded
	// connection goes to frps in-process, not over loopback.
	Control http.Handler
	// Vhost is frps's site proxy, called in-process. The edge has already
	// parsed the request; it is not written to a port and parsed again.
	Vhost http.Handler
	// Stop shuts frps down.
	Stop func()
}

type QUIC struct {
	ClientCA    string // PEM file of the CA that signs dark-node certificates
	Certificate func(*tls.ClientHelloInfo) (*tls.Certificate, error)
	// Verify runs after the client certificate chain verified; an error
	// refuses the connection.
	Verify func(tls.ConnectionState) error
}