Struct TlsConfig 

pub struct TlsConfig {
    pub enabled: bool,
    pub intercepted_ports: Vec<u16>,
    pub bypass: Vec<String>,
    pub verify_upstream: bool,
    pub ca: CaConfig,
    pub cache: CertCacheConfig,
}

TLS interception configuration.

When enabled is true, msbnet installs kernel-level redirect rules for intercepted_ports and runs a transparent TLS proxy that terminates guest connections with per-domain certificates signed by a microsandbox CA.

Fields

enabled: bool

Whether TLS interception is active.

intercepted_ports: Vec<u16>

TCP ports to intercept (default: [443]).

bypass: Vec<String>

Domains to bypass (no interception). Supports exact match and *.suffix wildcard patterns.

verify_upstream: bool

Whether to verify upstream server certificates against the host’s system trust store (default: true). Disable only for testing or internal services with self-signed certs.

ca: CaConfig

CA certificate configuration.

cache: CertCacheConfig

Certificate cache configuration.

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> TlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TlsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TlsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TlsConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.