zentinel-proxy 0.6.11

A security-first reverse proxy built on Pingora with sleepable ops at the edge
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

//! WebSocket frame handling for frame-level inspection.
//!
//! This module provides WebSocket frame parsing and encoding per RFC 6455,
//! enabling agents to inspect individual WebSocket frames for security purposes.
//!
//! # Architecture
//!
//! After a WebSocket upgrade (101 response), Zentinel can optionally intercept
//! the bidirectional byte stream and parse it into frames for inspection:
//!
//! ```text
//! Client <-> [Frame Parser] <-> Zentinel <-> [Frame Parser] <-> Upstream
//!                 |                                |
//!                 v                                v
//!          WebSocketFrame                   WebSocketFrame
//!                          \               /
//!                           v             v
//!                        Agent Inspector
//!                     (Allow/Drop/Close)
//! ```
//!
//! # Features
//!
//! - RFC 6455 compliant frame parsing
//! - Masking/unmasking support (client frames are masked)
//! - Configurable maximum frame size
//! - Frame-level agent inspection

pub mod codec;
pub mod inspector;
pub mod proxy;

pub use codec::{Opcode, WebSocketCodec, WebSocketFrame};
pub use inspector::{InspectionResult, WebSocketInspector};
pub use proxy::{CloseReason, FrameInspector, ProcessResult, WebSocketHandler};