Struct Egress 

pub struct Egress { /* private fields */ }

The hosts this plane may connect to.

Implementations

impl Egress

pub fn new() -> Self

An allowlist that permits nothing.

pub fn allow(self, host: impl AsRef<str>) -> Self

Grant one host.

Hosts are compared case-insensitively, because DNS is, and an allowlist that can be bypassed by capitalising a letter is not one.

pub fn len(&self) -> usize

pub fn is_empty(&self) -> bool

pub fn hosts(&self) -> impl Iterator<Item = &str>

Every granted host, in a stable order.

pub fn permits(&self, host: Option<&str>) -> Result<(), EgressError>

Whether a connection to host is permitted.

No wildcards, and that is deliberate. *.example.com reads as a convenience and is a grant of every host anybody can register under a domain — including one an attacker controls the moment a subdomain is dangling. A deployment that genuinely needs many hosts lists them.

Errors

EgressError::NotGranted, naming the host, so an operator reading the journal can see what was attempted rather than only that something was.

Trait Implementations

impl Clone for Egress

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Egress

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Egress

fn default() -> Self

Returns the “default value” for a type.

impl Eq for Egress

impl PartialEq for Egress

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Egress