Struct HttpForwardProxyLayer 

pub struct HttpForwardProxyLayer { /* private fields */ }

Available on crate features http and std only.

HTTP middleware for requests sent directly to an HTTP forward proxy.

The layer resolves EstablishedProxyRoute from the wrapped connection. The wrapped connection’s extensions, including an absent route, take precedence over all request metadata. This lets the layer distinguish a real forward-proxy connection from direct, SOCKS, and HTTP CONNECT-tunneled connections after route fallback and pool lookup have completed.

Configured Basic or Bearer credentials are inserted by default. Call Self::with_proxy_auth with false to disable insertion. Caller-provided Proxy-Authorization headers are always stripped on direct, SOCKS, CONNECT-tunneled, or unclassified connections, even with insertion disabled. Manual authentication is preserved only on established HTTP forward routes. A proxy-generated 407 response is exposed by default for ordinary HTTP clients; intermediary clients can enable Self::with_isolate_auth_error to turn it into HttpForwardProxyAuthRequired before any proxy response headers or body reach their downstream peer.

Custom proxy connectors must publish EstablishedProxyRoute in their established connection extensions. Missing metadata or a forward route with a non-HTTP proxy protocol disables forward-proxy behavior and never falls back to request-side routes or credentials.

Implementations

impl HttpForwardProxyLayer

pub fn new() -> HttpForwardProxyLayer

Create a layer which inserts configured proxy credentials and exposes proxy-generated 407 responses.

pub fn with_proxy_auth(self, enabled: bool) -> HttpForwardProxyLayer

Enable or disable preemptive Basic or Bearer authentication for HTTP forward-proxy requests.

This controls insertion only. Caller-provided Proxy-Authorization is preserved on established HTTP forward routes and always stripped on every other route, including connections without route metadata.

pub fn set_proxy_auth(&mut self, enabled: bool) -> &mut HttpForwardProxyLayer

Enable or disable preemptive Basic or Bearer authentication for HTTP forward-proxy requests.

This controls insertion only. Caller-provided Proxy-Authorization is preserved on established HTTP forward routes and always stripped on every other route, including connections without route metadata.

pub fn with_isolate_auth_error(self, enabled: bool) -> HttpForwardProxyLayer

Enable or disable isolation of a forward proxy’s 407 response.

When enabled, the response is dropped and HttpForwardProxyAuthRequired is returned. This is intended for intermediary services which must not expose one proxy hop’s challenge to a different downstream proxy client.

pub fn set_isolate_auth_error( &mut self, enabled: bool, ) -> &mut HttpForwardProxyLayer

Enable or disable isolation of a forward proxy’s 407 response.

When enabled, the response is dropped and HttpForwardProxyAuthRequired is returned. This is intended for intermediary services which must not expose one proxy hop’s challenge to a different downstream proxy client.

Trait Implementations

impl Clone for HttpForwardProxyLayer

fn clone(&self) -> HttpForwardProxyLayer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HttpForwardProxyLayer

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for HttpForwardProxyLayer

fn default() -> HttpForwardProxyLayer

Returns the “default value” for a type.

impl<S> Layer<S> for HttpForwardProxyLayer

type Service = HttpForwardProxyService<S>

The service produced by the layer.

fn layer(&self, inner: S) -> <HttpForwardProxyLayer as Layer<S>>::Service

Wrap the given service with the middleware, returning a new service.

fn into_layer(self, inner: S) -> <HttpForwardProxyLayer as Layer<S>>::Service

Same as layer but consuming self after the service was created.