icebox-gov 0.2.6

Runtime governance for autonomous offensive security — the single seam every human operator, REST client, and LLM agent must pass through before anything touches a target.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

use std::collections::HashMap;
use std::net::SocketAddr;
use std::sync::{LazyLock, RwLock};

use async_trait::async_trait;

pub mod netns;
pub mod tcp;

#[async_trait]
pub trait NetworkIsolator: Send + Sync {
    async fn setup(&self) -> anyhow::Result<()>;

    async fn spawn_proxy(
        &self,
        target_ip: &str,
        target_port: u16,
    ) -> anyhow::Result<(ProxyListener, tokio::task::JoinHandle<()>)>;

    async fn teardown(&self) -> anyhow::Result<()>;
}

pub struct ProxyListener {
    pub local_addr: SocketAddr,
    pub target_addr: SocketAddr,
}

/// Maps target host to local proxy address for egress isolation.
static REGISTRY: LazyLock<RwLock<HashMap<String, SocketAddr>>> =
    LazyLock::new(|| RwLock::new(HashMap::new()));

pub fn bind_proxy(target: &str, local: SocketAddr) {
    if let Ok(mut g) = REGISTRY.write() {
        g.insert(target.to_string(), local);
    }
}

pub fn unbind_proxy(target: &str) {
    if let Ok(mut g) = REGISTRY.write() {
        g.remove(target);
    }
}

pub fn is_proxied(target: &str) -> bool {
    REGISTRY
        .read()
        .map(|g| g.contains_key(target))
        .unwrap_or(false)
}

/// Returns the proxy address for host or the direct host:port.
pub fn resolve_dial(host: &str, port: u16) -> String {
    if let Ok(g) = REGISTRY.read() {
        if let Some(addr) = g.get(host) {
            return addr.to_string();
        }
    }
    format!("{host}:{port}")
}