frpsvc

type Frps struct {
	// Control serves frp control's WebSocket, which httpsvc hands it
	// once it has checked the dark node's certificate: the upgraded
	// connection goes to frps in-process, not over loopback.
	Control http.Handler
	// Vhost is frps's site proxy, called in-process. The edge has already
	// parsed the request; it is not written to a port and parsed again.
	Vhost http.Handler
	// Stop shuts frps down.
	Stop func()
	// contains filtered or unexported fields
}

type Options struct {
	// QUIC, when set, opens frp control on public UDP 443.
	QUIC *QUIC
	// HeaderTimeout is how long a visitor's request waits for the
	// origin's response headers when the request does not say
	// (vhost.WithResponseHeaderTimeout), in whole seconds; 0 is frp's
	// default.
	HeaderTimeout time.Duration
	// OnDomain is told when a name gains its first route and loses its last.
	OnDomain func(domain string, added bool)
	// OnTCPDomain is the same for TCP routes (tcp-tls proxies).
	OnTCPDomain func(domain string, added bool)
	// Tunnel is the name dark nodes log in on: no proxy may have it.
	Tunnel string
	// OnProxyError gets each site request frps could not proxy.
	OnProxyError func(*http.Request, error)
	// Node names the dark node of a tunnel connection's verified client
	// certificate, for the per-node session count.
	Node func(tls.ConnectionState) string
}

type QUIC struct {
	ClientCA    string // PEM file of the CA that signs dark-node certificates
	Certificate func(*tls.ClientHelloInfo) (*tls.Certificate, error)
	// Verify runs after the client certificate chain verified; an error
	// refuses the connection.
	Verify func(tls.ConnectionState) error
}