smokescreen

type Config struct {
	Ip                   string
	Port                 uint16
	Listener             net.Listener
	DenyRanges           []RuleRange
	AllowRanges          []RuleRange
	Resolver             *net.Resolver
	ConnectTimeout       time.Duration
	ExitTimeout          time.Duration
	MetricsClient        *MetricsClient
	EgressACL            acl.Decider
	SupportProxyProtocol bool
	TlsConfig            *tls.Config
	CrlByAuthorityKeyId  map[string]*pkix.CertificateList
	RoleFromRequest      func(subject *http.Request) (string, error)

	AdditionalErrorMessageOnDeny string
	Log                          *log.Logger
	DisabledAclPolicyActions     []string
	AllowMissingRole             bool
	StatsSocketDir               string
	StatsSocketFileMode          os.FileMode
	StatsServer                  *StatsServer // StatsServer
	ConnTracker                  *conntrack.Tracker
	Healthcheck                  http.Handler // User defined http.Handler for optional requests to a /healthcheck endpoint
	ShuttingDown                 atomic.Value // Stores a boolean value indicating whether the proxy is actively shutting down

	// Network type to use when performing DNS lookups. Must be one of "ip", "ip4" or "ip6".
	Network string

	// A connection is idle if it has been inactive (no bytes in/out) for this many seconds.
	IdleTimeout time.Duration

	// These are *only* used for traditional HTTP proxy requests
	TransportMaxIdleConns        int
	TransportMaxIdleConnsPerHost int

	// Used for logging connection time
	TimeConnect bool

	// Custom Dial Timeout function to be called
	ProxyDialTimeout func(ctx context.Context, network, address string, timeout time.Duration) (net.Conn, error)

	// Customer handler to allow clients to modify reject responses
	RejectResponseHandler func(*http.Response)

	// UnsafeAllowPrivateRanges inverts the default behavior, telling smokescreen to allow private IP
	// ranges by default (exempting loopback and unicast ranges)
	// This setting can be used to configure Smokescreen with a blocklist, rather than an allowlist
	UnsafeAllowPrivateRanges bool
	// contains filtered or unexported fields
}

type ExitStatus int

type HealthcheckMiddleware struct {
	Proxy       http.Handler
	Healthcheck http.Handler
}

type Log2LogrusWriter struct {
	Entry *logrus.Entry
}

type MetricsClient struct {
	StatsdClient statsd.ClientInterface
	// contains filtered or unexported fields
}

type RuleRange struct {
	Net  net.IPNet
	Port int
}

type StatsServer struct {
	// contains filtered or unexported fields
}

type TimeoutConn struct {
	net.Conn
	// contains filtered or unexported fields
}