Struct ConnectIpService 

pub struct ConnectIpService<A, H, R = GlobalDnsResolver, L = TunnelLimits> { /* private fields */ }

Available on crate feature masque only.

A Rama CONNECT-IP proxy service, independent of the platform packet interface.

A authorizes each request and returns local packet permissions/configuration. H handles the accepted packet/control session (e.g. an in-memory packet endpoint or an application packet adapter). Authentication can be layered before this service; admission must inspect the resulting request identity.

The service requires rama_tls::SecureTransport from a trusted TLS listener (or HTTP/3, whose transport is intrinsically QUIC). Do not synthesize transport metadata from client headers. A trusted TLS-termination layer may supply this marker after verifying the upstream transport; this is the same metadata contract used by Rama HTTP connection services. Admission and DNS run before the success response; the capacity lease survives until the handler or its task ends.

Implementations

impl<A, H> ConnectIpService<A, H>

pub fn new( template: ConnectIpTemplate, admission: A, handler: H, exec: Executor, ) -> ConnectIpService<A, H>

Create a service with optional admission limits and a ten-second deadline covering admission, DNS and upgrade. No forwarding policy is implicit.

impl<A, H, R, L> ConnectIpService<A, H, R, L>

pub fn with_limits<L2>(self, limits: L2) -> ConnectIpService<A, H, R, L2>

Use shared admission limits, optionally with a custom principal keyer.

pub fn with_open_timeout( self, timeout: Duration, ) -> ConnectIpService<A, H, R, L>

Total opening deadline (zero rejects immediately).

pub fn set_open_timeout( &mut self, timeout: Duration, ) -> &mut ConnectIpService<A, H, R, L>

Total opening deadline (zero rejects immediately).

pub fn maybe_with_proxy_name( self, name: Option<Arc<str>>, ) -> ConnectIpService<A, H, R, L>

Proxy-Status service identifier; defaults to the host addressed by the request.

pub fn maybe_set_proxy_name( &mut self, name: Option<Arc<str>>, ) -> &mut ConnectIpService<A, H, R, L>

Proxy-Status service identifier; defaults to the host addressed by the request.

pub fn with_proxy_name(self, name: Arc<str>) -> ConnectIpService<A, H, R, L>

Proxy-Status service identifier; defaults to the host addressed by the request.

pub fn set_proxy_name( &mut self, name: Arc<str>, ) -> &mut ConnectIpService<A, H, R, L>

Proxy-Status service identifier; defaults to the host addressed by the request.

pub fn without_proxy_name(self) -> ConnectIpService<A, H, R, L>

Proxy-Status service identifier; defaults to the host addressed by the request.

pub fn unset_proxy_name(&mut self) -> &mut ConnectIpService<A, H, R, L>

Proxy-Status service identifier; defaults to the host addressed by the request.

pub fn with_resolver<R2>(self, resolver: R2) -> ConnectIpService<A, H, R2, L>

Use another resolver, e.g. a tenant-aware or deterministic test resolver.

Trait Implementations

impl<A, H, R, L> Clone for ConnectIpService<A, H, R, L>

where L: Clone,

fn clone(&self) -> ConnectIpService<A, H, R, L>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<A, H, R, L> Debug for ConnectIpService<A, H, R, L>

where R: Debug, L: Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<A, H, R, L, B> Service<Request<B>> for ConnectIpService<A, H, R, L>

where A: Service<ConnectIpRequest<B>, Output = ConnectIpSessionConfig>, <A as Service<ConnectIpRequest<B>>>::Error: Into<Box<dyn Error + Send + Sync>>, H: Service<ConnectIpSession, Output = ()>, <H as Service<ConnectIpSession>>::Error: Into<Box<dyn Error + Send + Sync>>, R: DnsAddressResolver, L: AdmitTunnel<Request<B>>, B: Send + 'static,

type Output = Response

The type of the output returned by the service.

type Error = !

The type of error returned by the service.

async fn serve(&self, request: Request<B>) -> Result<Response, !>

Serve an output or an error for the given input

fn boxed(self) -> BoxService<Input, Self::Output, Self::Error>

Box this service to allow for dynamic dispatch.