meek

type Config struct {
	URL          string
	InnerHost    string
	ExtraHeaders map[string]string
	HTTPClient   *http.Client
	PollInterval time.Duration
	MaxBodyBytes int
	SessionIDLen int
	ReadTimeout  time.Duration
	// MaxWriteBufBytes caps the unsent Write backlog. Write blocks once
	// the buffer reaches this size and resumes as the poll loop drains
	// it, so a sender outpacing a slow front applies backpressure
	// instead of growing memory without bound.
	MaxWriteBufBytes int
	// MaxPollRetries is how many times a failed poll is retried (with backoff)
	// before the session is torn down. <=0 uses defaultMaxPollRetries. Retries
	// are made safe by the per-poll X-Meek-Seq the server dedupes.
	MaxPollRetries int
}

type Conn struct {
	// contains filtered or unexported fields
}

type Inbound struct {
	inbound.Adapter
	// contains filtered or unexported fields
}

type Outbound struct {
	outbound.Adapter
	// contains filtered or unexported fields
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerConfig struct {
	// Upstream is dialed for each new session and gets the bytes the
	// client posts; bytes from the upstream flow back as response
	// bodies. The server pipes bytes verbatim and is agnostic to the
	// upstream protocol, but the bundled meek outbound opens each session
	// with a SOCKS5 CONNECT, so a SOCKS5 proxy on the same host
	// (e.g. microsocks at "127.0.0.1:1080") is the expected deployment.
	Upstream string

	// MaxBodyBytes caps both the request-body the server accepts (larger
	// POSTs get 413) and the response-body it returns per POST. Default
	// 256 KiB (matches the client's default).
	MaxBodyBytes int

	// ResponseHoldoff is how long the server waits for upstream bytes
	// before responding with whatever it has (possibly empty).
	// Too small: many empty responses, idle CPU. Too large: high
	// client-perceived latency on the upstream-quiet path. Default
	// 50 ms.
	ResponseHoldoff time.Duration

	// SessionIdleTimeout is how long a session may go without a POST
	// before the reaper drops it. Should be at least 2-3x the client's
	// expected PollInterval to handle network blips. Default 5 min.
	SessionIdleTimeout time.Duration

	// Dialer optionally overrides net.Dial for upstream connections.
	Dialer func(network, address string) (net.Conn, error)

	// AuthToken, when non-empty, is a shared secret every request must
	// present in the X-Meek-Auth header. Without it the server is an
	// open relay into Upstream — anyone who reaches the endpoint can
	// create sessions and tunnel arbitrary traffic — so production
	// deployments on a public/fronted hostname MUST set it. Empty
	// disables the check (intended only for local tests).
	AuthToken string

	Logger *slog.Logger
}