tunnel

type Backoff interface {
	// Next returns the duration to sleep before retrying to reconnect.
	// If the returned value is negative, the retry is aborted.
	NextBackOff() time.Duration

	// Reset is used to signal a reconnection was successful and next
	// call to Next should return desired time duration for 1st reconnection
	// attempt.
	Reset()
}

type BackoffConfig struct {
	Interval    time.Duration
	Multiplier  float64
	MaxInterval time.Duration
	MaxTime     time.Duration
}

type Client struct {
	sync.Mutex
	// contains filtered or unexported fields
}

type ClientConfig struct {
	//ServiceName name of the service
	ServiceName string
	// ServerAddr specifies  address of the tunnel server.
	ServerAddr string
	//Upstream upstream address
	Upstream string
	//Protocol ..
	Protocol string
	// TLSClientConfig specifies the tls configuration to use with
	// tls.Client.
	TLSClientConfig *tls.Config
	// Backoff specifies backoff policy on server connection retry. If nil
	// when dial fails it will not be retried.
	Backoff Backoff

	//ServiceProxy is Func responsible for transferring data between server and local services.
	ServiceProxy proxy.Func
	// Logger is optional logger. If nil logging is disabled.
	Logger *relaylogger.RelayLog
}

type ControllerInfo struct {
	Addr         string
	PeerProbeSNI string
	RootCA       string
	ClientCRT    string
	ClientKEY    string
}

type Dialin struct {
	Protocol   string
	Addr       string
	ServerName string
	RootCA     []byte
	ServerCRT  []byte
	ServerKEY  []byte
	Version    string
}

type Dialout struct {
	Protocol           string
	Addr               string
	ServiceSNI         string
	RootCA             string
	ClientCRT          string
	ClientKEY          string
	Upstream           string
	UpstreamClientCRT  string
	UpstreamClientKEY  string
	UpstreamRootCA     string
	UpstreamSkipVerify bool
	UpstreamKubeConfig string
	Version            string
}

type Relay struct {
	Protocol   string
	Addr       string
	DialinSfx  string
	ServerName string
	RootCA     []byte
	ServerCRT  []byte
	ServerKEY  []byte
	Version    string
}

type RelayConn struct {
	// Conn is the network connection
	Conn net.Conn

	// Type of the server. Relay means user-facing
	// Dialin means cluster-facing
	Type string

	// ServerName of the server which accepted the connection
	ServerName string

	// CertSNI derived from client certificate
	CertSNI string

	// PeerID derived from client certificate
	PeerID string
	// contains filtered or unexported fields
}

type Server struct {
	// Type of the server. Relay means user-facing
	// Dialin means cluster-facing
	Type string

	// Name specifies the service names example kubectl, kubeweb, etc.
	Name string

	// ServerName of the listening server.
	ServerName string

	// Protocol specifies protocol used http(s)
	Protocol string

	// RootCA used to verify TLS client connections
	RootCA []byte

	// ServerCRT used for the server
	ServerCRT []byte

	// ServerKEY used for the server
	ServerKEY []byte

	// DialinServerName specify the dialin server name
	// valid only for relay server types.
	DialinServerName string

	// DialinPool where dialin connections are parked
	// valid only for dialin server types
	DialinPool *dialinPool

	Provisioner *authzProvisioner
	// contains filtered or unexported fields
}

type ServerConfig struct {
	RelayAddr  string
	Relays     map[string]*Relay
	CDRelays   map[string]*Relay
	Dialins    map[string]*Dialin
	Controller ControllerInfo
	AuditPath  string
}

type ServerListen struct {
	// Addr specifies the listen address
	Addr string
	// Protocol of all servers listening in above address
	Protocol string
	// RootCAs used to verify TLS client connections
	RootCAs []string
	// List of certs used to terminate listening *.format supported
	Certs []utils.SNICertificate
	// ServerList are the servers using above listen address
	ServerList []*Server

	//Mux tls sni muxer
	Mux *vhost.TLSMuxer
}