proxy

Documentation

Index

• func NewHTTPProxy(tr http.RoundTripper, cfg config.Proxy) http.Handler
• func Shutdown()
• func ShuttingDown() bool
• type TCPProxy
  • func NewTCPSNIProxy(cfg config.Proxy) TCPProxy

Functions

func NewHTTPProxy

func NewHTTPProxy(tr http.RoundTripper, cfg config.Proxy) http.Handler

func Shutdown

func Shutdown()

Shutdown sets the shutdown flag which triggers the proxy to stop routing new requests.

func ShuttingDown

func ShuttingDown() bool

ShuttingDown returns whether the shutdown flag has been set.

Types

type TCPProxy

type TCPProxy interface {
	Serve(conn net.Conn)
}

TCPProxy implements an SNI aware transparent TCP proxy which captures the TLS client hello, extracts the host name and uses it for finding the upstream server. Then it replays the ClientHello message and copies data transparently allowing to route a TLS connection based on the SNI header without decrypting it.

This implementation is EXPERIMENTAL in the sense that it has been tested to work but is considered incomplete for production use. It needs support for read and write timeouts which require replacing the io.Copy() with something that can set the deadlines on the underlying connections. One possible way could be to use TeeReader/TeeWriter streams which discard the data and only set the deadlines. The implementation also needs a full integration test.

This implementation exists to gather more real-world data to finalize the code at a later stage.

func NewTCPSNIProxy

func NewTCPSNIProxy(cfg config.Proxy) TCPProxy