netguard

func Check ¶

func Check(g Guard, ipStr string) bool

func DialContext ¶

func DialContext(g Guard, ctx context.Context, network, addr string) (net.Conn, error)

DialContext resolves the address, validates ALL resolved IPs against the guard, then dials the first allowed IP directly (preventing DNS rebinding). Uses net.Dialer Control as defense-in-depth to re-check at syscall level.

func HTTPClient ¶

func HTTPClient(g Guard) *http.Client

HTTPClient returns an *http.Client using the guarded transport.

func HTTPTransport ¶

func HTTPTransport(g Guard) *http.Transport

HTTPTransport returns an *http.Transport that uses the guarded DialContext.