proxy

Documentation

Overview

Package proxy contains the core proxy functionality and aTLS configuration

Index

• Constants
• func CreateAttestationIssuer(log *slog.Logger, attestationType AttestationType) (atls.Issuer, error)
• func CreateAttestationValidators(log *slog.Logger, attestationType AttestationType, jsonMeasurementsPath string) ([]atls.Validator, error)
• func ExtractMeasurementsFromExtension(ext *pkix.Extension, v variant.Variant) (map[uint32][]byte, error)
• func GetMeasurementsFromTLS(certs []*x509.Certificate, validatorOIDs []asn1.ObjectIdentifier) (atlsVariant variant.Variant, measurements map[uint32][]byte, err error)
• type AttestationLogger
  • func (w AttestationLogger) Debug(format string, args ...any)
  • func (w AttestationLogger) Info(format string, args ...any)
  • func (w AttestationLogger) Warn(format string, args ...any)
• type AttestationType
  • func ParseAttestationType(attestationType string) (AttestationType, error)
• type MultiValidator
  • func NewMultiValidator(validators []atls.Validator) *MultiValidator
  • func (v *MultiValidator) OID() asn1.ObjectIdentifier
  • func (v *MultiValidator) Validate(ctx context.Context, attDocRaw, nonce []byte) (userData []byte, err error)
• type Proxy
  • func NewProxy(log *slog.Logger, targetURL string, validators []atls.Validator) *Proxy
  • func (p *Proxy) ServeHTTP(w http.ResponseWriter, r *http.Request)
  • func (p *Proxy) WithTransport(transport *http.Transport) *Proxy

Constants

const (
	AttestationTypeHeader string = "X-Flashbots-Attestation-Type"
	MeasurementHeader     string = "X-Flashbots-Measurement"
)

const AvailableAttestationTypes string = "none, azure-tdx, dcap-tdx"

Functions

func CreateAttestationIssuer

func CreateAttestationIssuer(log *slog.Logger, attestationType AttestationType) (atls.Issuer, error)

func CreateAttestationValidators

func CreateAttestationValidators(log *slog.Logger, attestationType AttestationType, jsonMeasurementsPath string) ([]atls.Validator, error)

func ExtractMeasurementsFromExtension

func ExtractMeasurementsFromExtension(ext *pkix.Extension, v variant.Variant) (map[uint32][]byte, error)

func GetMeasurementsFromTLS

func GetMeasurementsFromTLS(certs []*x509.Certificate, validatorOIDs []asn1.ObjectIdentifier) (atlsVariant variant.Variant, measurements map[uint32][]byte, err error)

Types

type AttestationLogger

type AttestationLogger struct {
	Log *slog.Logger
}

func (AttestationLogger) Debug

func (w AttestationLogger) Debug(format string, args ...any)

func (AttestationLogger) Info

func (w AttestationLogger) Info(format string, args ...any)

func (AttestationLogger) Warn

func (w AttestationLogger) Warn(format string, args ...any)

type AttestationType

type AttestationType string

const (
	AttestationNone     AttestationType = "none"
	AttestationAzureTDX AttestationType = "azure-tdx"
	AttestationDCAPTDX  AttestationType = "dcap-tdx"
)

func ParseAttestationType

func ParseAttestationType(attestationType string) (AttestationType, error)

type MultiValidator

type MultiValidator struct {
	// contains filtered or unexported fields
}

MultiValidator is a validator for Azure confidential VM attestation using TDX which accepts multiple measurements

func NewMultiValidator

func NewMultiValidator(validators []atls.Validator) *MultiValidator

NewMultiValidator returns a new Validator for Azure confidential VM attestation using TDX which accepts multiple measurements

func (*MultiValidator) OID

func (v *MultiValidator) OID() asn1.ObjectIdentifier

func (*MultiValidator) Validate

func (v *MultiValidator) Validate(ctx context.Context, attDocRaw, nonce []byte) (userData []byte, err error)

type Proxy

type Proxy struct {
	// contains filtered or unexported fields
}

func NewProxy

func NewProxy(log *slog.Logger, targetURL string, validators []atls.Validator) *Proxy

func (*Proxy) ServeHTTP

func (p *Proxy) ServeHTTP(w http.ResponseWriter, r *http.Request)

func (*Proxy) WithTransport

func (p *Proxy) WithTransport(transport *http.Transport) *Proxy