Struct SafeDnsResolver

Source

pub struct SafeDnsResolver { /* private fields */ }

Expand description

Custom DNS resolver that re-validates resolved IPs against the IpPolicy at connect time.

SECURITY (F-NET-2): the parse-time IP blocklist on SafeUrl::parse catches http://127.0.0.1 and http://169.254.169.254 literally, but an attacker who controls evil.com with TTL=0 can return 8.8.8.8 (passes parse) and then 127.0.0.1 (used at TCP connect). This resolver re-applies the blocklist to every resolved SocketAddr — rebind attempts fail with a connect-time error before any byte reaches the loopback / metadata service.

SafeDnsResolver

Struct SafeDnsResolver Copy item path

Implementations§

impl SafeDnsResolver

pub fn new(policy: IpPolicy) -> Self

Trait Implementations§

impl Resolve for SafeDnsResolver

fn resolve(&self, name: Name) -> Resolving

Auto Trait Implementations§

impl Freeze for SafeDnsResolver

impl RefUnwindSafe for SafeDnsResolver

impl Send for SafeDnsResolver

impl Sync for SafeDnsResolver

impl Unpin for SafeDnsResolver

impl UnsafeUnpin for SafeDnsResolver

impl UnwindSafe for SafeDnsResolver

Blanket Implementations§

impl<T> Any for Twhere T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<T> Borrow<T> for Twhere T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for Twhere T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<T> From<T> for T

fn from(t: T) -> T

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self>

fn in_current_span(self) -> Instrumented<Self>

impl<T, U> Into<U> for Twhere U: From<T>,

fn into(self) -> U

impl<T> PolicyExt for Twhere T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>where T: Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>where T: Policy<B, E>, P: Policy<B, E>,

impl<T> Same for T

type Output = T

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

type Error = Infallible

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

impl<T> WithSubscriber for T

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>where S: Into<Dispatch>,

fn with_current_subscriber(self) -> WithDispatch<Self>

Struct SafeDnsResolver

impl<T> Any for T
where T: 'static + ?Sized,

impl<T> Borrow<T> for T
where T: ?Sized,

impl<T> BorrowMut<T> for T
where T: ?Sized,

impl<T, U> Into<U> for T
where U: From<T>,

impl<T> PolicyExt for T
where T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

impl<T, U> TryFrom<U> for T
where U: Into<T>,

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,