Enum PolicyConfigOptions 

pub enum PolicyConfigOptions {
    None,
    InternalOnly,
    ExternalOnlyV1,
    ExternalOnlyLatest,
}

Preset blocking strategies used when constructing an AntiSSRFPolicy.

These options configure sensible defaults. You can further customize the policy after creation via AntiSSRFPolicy methods.

Variants

None

No restrictions. All IP addresses, protocols, and headers are allowed.

Use this variant when you intend to configure every rule manually or when you only need the library for CIDR parsing and domain validation.

InternalOnly

Block all external IPs unless explicitly allowlisted.

Sets deny_all_unspecified_ips to true. Any IP address that is not in the allowlist is denied. This is suitable for services that should only talk to a known set of internal or partner endpoints.

ExternalOnlyV1

Block known dangerous IP ranges (V1 list).

Populates the denylist with crate::ip_address_ranges::RECOMMENDEDV1, which includes:

• Azure IMDS (169.254.169.254/32)
• Azure WireServer (168.63.129.16/32)
• Loopback, link-local, multicast, RFC 1918 private ranges, CGNAT, and more

Also enables add_xff_header. External public IPs (e.g. 8.8.8.8) remain allowed.

ExternalOnlyLatest

Alias for ExternalOnlyV1.

Reserved for forward compatibility. When a future version introduces a new recommended blocklist, this variant will automatically map to it.

Trait Implementations

impl Clone for PolicyConfigOptions

fn clone(&self) -> PolicyConfigOptions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PolicyConfigOptions

impl Debug for PolicyConfigOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for PolicyConfigOptions

impl PartialEq for PolicyConfigOptions

fn eq(&self, other: &PolicyConfigOptions) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for PolicyConfigOptions