Struct SsrfSafeDnsResolver 

pub struct SsrfSafeDnsResolver { /* private fields */ }

reqwest::dns::Resolve impl that vets every resolved IP against is_ssrf_blocked before handing addresses back to the HTTP connector. See module docs for the threat model.

Implementations

impl SsrfSafeDnsResolver

pub fn from_system() -> Result<Self, ToolError>

Build a resolver from the system’s DNS config (/etc/resolv.conf on Unix, the Windows registry equivalents otherwise) with no explicit IP overrides.

pub fn from_config( config: ResolverConfig, opts: ResolverOpts, ) -> Result<Self, ToolError>

Build a resolver with an explicit (config, opts) pair — useful for tests or for environments that pin a specific upstream resolver.

pub fn with_explicit_allow(self, ips: HashSet<IpAddr>) -> Self

Replace the explicit-allow set. IPs in the set bypass is_ssrf_blocked.

Trait Implementations

impl Debug for SsrfSafeDnsResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Resolve for SsrfSafeDnsResolver

fn resolve(&self, name: Name) -> Resolving

Performs DNS resolution on a Name. The return type is a future containing an iterator of SocketAddr.