Struct SniProxyConfig 

pub struct SniProxyConfig {
    pub bind_addr: SocketAddr,
    pub upstream_addr: SocketAddr,
    pub hostname_allowlist: Vec<String>,
    pub cdn_providers: Vec<CdnProvider>,
    pub cell_id: String,
    pub run_id: String,
    pub policy_digest: Option<String>,
    pub keyset_id: Option<String>,
    pub issuer_kid: Option<String>,
    pub correlation_id: Option<String>,
    pub upstream_resolver_id: String,
    pub peek_timeout: Duration,
}

Subset of ExecutionCellSpec that the proxy needs at run-time. Owned so the supervisor can build it once and pass it through the async-to-sync-thread boundary without lifetime gymnastics (mirrors crate::dns_proxy::DnsProxyConfig).

Fields

bind_addr: SocketAddr

Address the proxy listener is bound to inside the cell’s netns. Used for diagnostics; the caller passes the actual pre-bound listener.

upstream_addr: SocketAddr

Address the proxy forwards allowed connections to. In a real deployment this is a transparent next-hop (egress NAT, sidecar) that re-emits the bytes onto the wire. In the unit tests it is a localhost echo / handshake stub.

hostname_allowlist: Vec<String>

Hostname allowlist (literal or single-leading-*. wildcard). Same shape as crate::dns_proxy::DnsProxyConfig::hostname_allowlist — shared matcher in cellos_core::hostname_allowlist.

cdn_providers: Vec<CdnProvider>

CDN providers the workload’s spec declares (spec.authority.cdnAuthority.providers). scope: retained for diagnostics and future SNI ↔ Host fronting detection; the current decision logic does not branch on it.

cell_id: String

Cell identifier (mirrors lifecycle.started.cellId).

run_id: String

Run identifier (mirrors lifecycle.started.runId).

policy_digest: Option<String>

Optional policyDigest to bind into emitted events.

keyset_id: Option<String>

Optional keysetId to bind into emitted events.

issuer_kid: Option<String>

Optional issuerKid to bind into emitted events.

correlation_id: Option<String>

Optional correlationId to bind into emitted events.

upstream_resolver_id: String

Resolver / proxy identifier stamped into events for audit trail.

peek_timeout: Duration

Maximum time to wait for first bytes from the workload. On timeout the connection is dropped and one l7_peek_timeout event is emitted.

Trait Implementations

impl Clone for SniProxyConfig

fn clone(&self) -> SniProxyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SniProxyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.