soth-mitm 0.3.0

Rust intercepting proxy crate with deterministic handler/event contracts for SOTH.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

use std::sync::Arc;

use crate::observe::FlowContext;
use dashmap::{DashMap, DashSet};

use crate::runtime::connection_meta::tls_info_from_intercept_decision;
use crate::types::{ConnectionMeta, FlowId};

pub(super) async fn connection_meta_for_context(
    context: &FlowContext,
    connection_meta_by_flow: &Arc<DashMap<FlowId, Arc<ConnectionMeta>>>,
    closed_flow_live: &Arc<DashSet<FlowId>>,
    tls_intercepted_flow_ids: &Arc<DashMap<FlowId, ()>>,
) -> Option<Arc<ConnectionMeta>> {
    let Some(connection_meta) = connection_meta_by_flow
        .get(&context.flow_id)
        .map(|value| Arc::clone(value.value()))
    else {
        if closed_flow_live.contains(&context.flow_id) {
            return None;
        }
        debug_assert!(
            false,
            "connection {} missing ConnectionMeta in flow map",
            context.flow_id
        );
        tracing::warn!(
            flow_id = context.flow_id.as_u64(),
            host = %context.server_host,
            port = context.server_port,
            "missing ConnectionMeta in flow map"
        );
        return None;
    };
    if connection_meta.tls_info.is_some() {
        return Some(connection_meta);
    }

    let intercepted_tls = tls_intercepted_flow_ids.contains_key(&context.flow_id);
    let Some(tls_info) = tls_info_from_intercept_decision(context, intercepted_tls) else {
        return Some(connection_meta);
    };

    let mut enriched = (*connection_meta).clone();
    enriched.tls_info = Some(tls_info);
    let enriched = Arc::new(enriched);
    connection_meta_by_flow.insert(context.flow_id, Arc::clone(&enriched));
    Some(enriched)
}