Struct ProxyPolicy 

pub struct ProxyPolicy { /* private fields */ }

How to derive a client address from the socket peer plus request headers.

Implementations

impl ProxyPolicy

pub fn new(trusted_proxies: &[String], header: &str) -> Result<Self>

Validates the trusted-proxy CIDRs and the header name at startup.

pub fn resolve( &self, peer: Option<IpAddr>, headers: &HeaderMap, ) -> Option<IpAddr>

Resolves the effective client address.

Returns the canonicalized peer unless the peer is a trusted proxy, in which case the forwarded-for header is walked right to left, past any hop that is itself a trusted proxy, to the first address the chain did not add itself. That is the closest thing to the real client that the trusted portion of the chain vouches for; entries further left were written by whoever connected to the outermost proxy and cannot be believed.

Trait Implementations

impl Clone for ProxyPolicy

fn clone(&self) -> ProxyPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProxyPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ProxyPolicy

fn default() -> Self

Trust nothing: the peer address is always the client.