Enum EgressPolicy 

pub enum EgressPolicy {
    Internet,
    Allow {
        allow: Vec<String>,
    },
}

Per-sandbox outbound policy enforced by the gateway.

Mail ports 25, 465 and 587 require an explicit port in an allowlist target, such as smtp.example.com:587; internet and portless targets exclude them. This protects the deployment’s shared outbound IP from mail abuse and blocklisting, which could disrupt every tenant’s access through that IP.

Variants

Internet

Public internet access except mail ports 25, 465 and 587. Private and link-local destinations remain forbidden.

Allow

Explicit destinations; unspecified ports exclude 25, 465 and 587. Wildcards include the apex. An explicit port can allow a mail destination.

Fields

allow: Vec<String>

Hostnames, wildcard hostnames, IPv4 literals or IPv4 CIDRs, optionally with a port.

Implementations

impl EgressPolicy

pub fn validate(&self) -> Result<()>

Validates every target before a deployment or runtime request can take effect.

pub fn normalized(&self) -> Result<Self>

Returns a validated policy with ASCII, lowercase names and canonical IP networks.

pub fn canonical_json(&self) -> Result<Vec<u8>>

Canonical JSON used to authenticate gateway policy writes: normalized, sorted, no whitespace. Duplicate entries remain present; sorting makes input order irrelevant to the digest.

pub fn policy_digest(&self) -> Result<String>

SHA-256 digest authenticating the policy body in an admin JWS.

pub fn allows(&self, host: &str, port: u16) -> Result<bool>

Whether a concrete public destination and port match this policy.

Trait Implementations

impl Clone for EgressPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EgressPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EgressPolicy

fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Eq for EgressPolicy

impl PartialEq for EgressPolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for EgressPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for EgressPolicy