networkpolicy

package

v0.4.0 Latest Latest Go to latest Published: Jul 25, 2026 License: AGPL-3.0 Imports: 9 Imported by: 0

Details

Package networkpolicy provides the outbound HTTP transport used for user-configured destinations.

This section is empty.

View Source

var (
	ErrDisallowedURL = errors.New("URL must resolve to an allowed address")
)

func AllowsLocalhostDevelopment(publicURL string) bool

AllowsLocalhostDevelopment reports whether publicURL explicitly configures a localhost HTTP development instance.

func SameOrigin(a, b *url.URL) bool

SameOrigin compares URL scheme, hostname, and effective port.

type Policy struct {
	// contains filtered or unexported fields
}

Policy validates URLs and supplies clients backed by one shared transport.

func New(privateCIDRs []netip.Prefix, allowLocalhost bool) *Policy

New constructs an outbound policy. allowLocalhost is only for development instances whose configured public URL is itself localhost.

func (p *Policy) Client(timeout time.Duration) *http.Client

Client returns an HTTP client backed by the policy's shared transport.

func (p *Policy) ParseURL(raw string) (*url.URL, error)

ParseURL validates the non-DNS properties of an outbound URL. DNS is resolved again by the transport immediately before dialing.