Struct SshAction 

pub struct SshAction {
    pub message: String,
    pub reject: bool,
    pub accept: bool,
    pub session_duration_nanos: Option<i64>,
    pub allow_agent_forwarding: bool,
    pub allow_local_port_forwarding: bool,
    pub allow_remote_port_forwarding: bool,
    pub recorders: Vec<SocketAddr>,
    pub on_recording_failure: Option<SshRecorderFailureAction>,
    pub hold_and_delegate: String,
}

The action taken when a rule matches. Mirrors tailcfg.SSHAction.

Recording (recorders / on_recording_failure) and the interactive hold_and_delegate control round-trip are carried through from the wire so the server can enforce them fail-closed. This fork has no recorder transport and no delegate round-trip yet, so a rule that demands either (non-empty recorders, or a non-empty hold_and_delegate) cannot be honored and the session is refused rather than silently downgraded to a plain accept.

Fields

message: String

Optional message shown to the user.

reject: bool

Reject the connection.

accept: bool

Accept the connection.

session_duration_nanos: Option<i64>

Max session duration in nanoseconds (None/0 = unlimited).

allow_agent_forwarding: bool

Allow SSH agent forwarding.

allow_local_port_forwarding: bool

Allow local port forwarding.

allow_remote_port_forwarding: bool

Allow remote port forwarding.

recorders: Vec<SocketAddr>

Session recorders (ip:port) this session must be streamed to. A non-empty list means the policy demands recording; mirrors tailcfg.SSHAction.Recorders.

on_recording_failure: Option<SshRecorderFailureAction>

What to do when recording cannot be performed; mirrors tailcfg.SSHAction.OnRecordingFailure. None is Go’s “ignore recording failures” (fail-open). The interim server still refuses when it has no recorder transport at all — see SshAccept::recording_required.

hold_and_delegate: String

If non-empty, the rule wants the final decision delegated to this URL over a control round-trip (Go HoldAndDelegate). Carried for fidelity; this fork does not perform the delegate fetch, so a rule bearing it is treated as not-yet-supported and denied (fail-closed) rather than silently accepted. Mirrors tailcfg.SSHAction.HoldAndDelegate.

Trait Implementations

impl Clone for SshAction

fn clone(&self) -> SshAction

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SshAction

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SshAction

fn default() -> SshAction

Returns the “default value” for a type.

impl Eq for SshAction

impl PartialEq for SshAction

fn eq(&self, other: &SshAction) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SshAction