Struct Http3MitmRelay 

pub struct Http3MitmRelay<M = (ConsumeErrLayer<Trace, StaticOutput<DefaultErrorResponse>>, ArcLayer), P = bool> { /* private fields */ }

Available on crate feature http-backend only.

Relays HTTP/3 between a server connection (ingress) and a client connection (egress) that were established and authenticated before: the HTTP/3 counterpart of HttpMitmRelay.

Requests pass through the same HTTP middleware model: hop-by-hop fields are consumed at the boundary and Self::with_bound_authority checks every request before and after the middleware. Each hop keeps its own QPACK state; egress SETTINGS arrive before the ingress side advertises its own, so Extended CONNECT is offered only when the origin supports it, and ingress field sections are bounded by the origin’s limit. Priorities follow each request upstream, CONNECT and Extended CONNECT tunnels are bridged until both directions finish, and middleware selects Capsule/HTTP Datagram semantics with HttpDatagrams. GOAWAY from either side drains the relay.

Each hop advertises the other peer’s initial SETTINGS in their original order, limited to what this relay implements plus GREASE: values are lowered to the local hop’s budgets, an origin’s Extended CONNECT grant is dropped unless ingress offers it, and HTTP Datagram grants unless both hops carry datagrams; a client’s ENABLE_CONNECT_PROTOCOL grants nothing and is kept. Other settings are dropped and traced. SETTINGS missing the readiness deadline leave the other hop on its own. An explicit Config::settings_profile on a hop is used as configured instead.

Early requests and server push are disabled on both hops. A relay that fails, or whose serve future is dropped (even before it is first polled), closes both connections with H3_INTERNAL_ERROR.

Implementations

impl Http3MitmRelay

pub fn new(exec: Executor) -> Http3MitmRelay

Create a relay with default per-hop configurations; ingress offers Extended CONNECT whenever the origin does.

impl<M, P> Http3MitmRelay<M, P>

pub fn with_bound_authority<Q>( self, authority: BoundAuthority<Q>, ) -> Http3MitmRelay<M, Q>

Bind the relayed connection to its trusted logical origin and policy.

Mismatches return 421 without opening an upstream request stream.

pub fn with_http_middleware<N>(self, middleware: N) -> Http3MitmRelay<N, P>

Set the HTTP middleware between the ingress server and the egress client.

pub fn with_ingress_config(self, config: Config) -> Http3MitmRelay<M, P>

HTTP/3 settings of the ingress (server) side.

pub fn set_ingress_config( &mut self, config: Config, ) -> &mut Http3MitmRelay<M, P>

HTTP/3 settings of the ingress (server) side.

pub fn with_egress_config(self, config: Config) -> Http3MitmRelay<M, P>

HTTP/3 settings of the egress (client) side.

pub fn set_egress_config(&mut self, config: Config) -> &mut Http3MitmRelay<M, P>

HTTP/3 settings of the egress (client) side.

pub fn with_settings_timeout(self, timeout: Duration) -> Http3MitmRelay<M, P>

How long both QUIC handshakes, optional client SETTINGS readiness and the origin’s SETTINGS may take, counted from the moment serve is called. Defaults to DEFAULT_EAGER_PEER_SETTINGS_TIMEOUT.

pub fn set_settings_timeout( &mut self, timeout: Duration, ) -> &mut Http3MitmRelay<M, P>

How long both QUIC handshakes, optional client SETTINGS readiness and the origin’s SETTINGS may take, counted from the moment serve is called. Defaults to DEFAULT_EAGER_PEER_SETTINGS_TIMEOUT.

pub fn with_forbidden_trailers( self, forbidden_trailers: ForbiddenTrailers, ) -> Http3MitmRelay<M, P>

Which trailer fields are forwarded although their definitions forbid them in trailers. Defaults to ForbiddenTrailers::AllowAll.

pub fn set_forbidden_trailers( &mut self, forbidden_trailers: ForbiddenTrailers, ) -> &mut Http3MitmRelay<M, P>

Which trailer fields are forwarded although their definitions forbid them in trailers. Defaults to ForbiddenTrailers::AllowAll.

Trait Implementations

impl<M, P> Clone for Http3MitmRelay<M, P>

where M: Clone, P: Clone,

fn clone(&self) -> Http3MitmRelay<M, P>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<M, P> Debug for Http3MitmRelay<M, P>

where M: Debug, P: Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<M, P> Service<BridgeIo<Connection, Connection>> for Http3MitmRelay<M, P>

where (RemoveRequestHeaderLayer, M, RemoveResponseHeaderLayer, ValidateRequestHeaderLayer<Option<BoundAuthority<P>>>): Layer<Http3EgressService> + Clone, <(RemoveRequestHeaderLayer, M, RemoveResponseHeaderLayer, ValidateRequestHeaderLayer<Option<BoundAuthority<P>>>) as Layer<Http3EgressService>>::Service: Service<Request, Output = Response> + Clone, <<(RemoveRequestHeaderLayer, M, RemoveResponseHeaderLayer, ValidateRequestHeaderLayer<Option<BoundAuthority<P>>>) as Layer<Http3EgressService>>::Service as Service<Request>>::Error: Into<Box<dyn Error + Sync + Send>>, M: Send + Sync + 'static + Clone, P: Matcher<Request> + Clone,

type Output = ()

The type of the output returned by the service.

type Error = Box<dyn Error + Sync + Send>

The type of error returned by the service.

fn serve( &self, _: BridgeIo<Connection, Connection>, ) -> impl Future<Output = Result<(), Box<dyn Error + Sync + Send>>> + Send

Serve an output or an error for the given input

fn boxed(self) -> BoxService<Input, Self::Output, Self::Error>

Box this service to allow for dynamic dispatch.