Skip to main content

Module peek

Module peek 

Available on crate features quic and std only.
Expand description

Bounded inspection of one client Initial flight without producing packets.

The caller retains original datagrams and their metadata for routing. This inspector keeps only the ClientHello being assembled: each Initial is opened once with keys derived once per attempt, and its CRYPTO data is copied straight into place. Optional structural retention records frame geometry without keeping bodies. It neither accepts a QUIC connection nor makes an interception decision. An ECH ClientHello describes only the outer hello; offered ALPN is not negotiated protocol evidence. Source/global admission and inspection rate limits belong to the router and must run before calling InitialPeek::inspect.

Structs§

InitialPeek
Incremental, opt-in ClientHello inspection for one QUIC connection attempt.
PeekedClientHello
Parsed Initial-flight metadata. This contains the outer ClientHello when ECH is present and makes no claim about the eventual negotiated protocol.

Enums§

PeekError
A terminal inspection outcome. The router decides what to do with retained datagrams; malformed or expired input must not imply untouched forwarding.