Expand description
TLS interception: inline MITM for the smoltcp networking stack.
All TCP connections terminate at smoltcp. For intercepted ports, the proxy task does TLS MITM by terminating the guest’s TLS with a generated per-domain certificate and re-originating a TLS connection to the real server.
Modules§
- state
- Shared TLS state: CA, certificate cache, and upstream connectors.
Structs§
- Cert
Cache Config - Per-domain certificate cache configuration.
- Intercept
CaConfig - Certificate authority configuration for TLS interception.
- Scoped
Upstream CaCert - A CA certificate PEM file trusted only for matching upstream hosts.
- Scoped
Verify Upstream - An upstream certificate verification override for matching hosts.
- TlsConfig
- TLS interception configuration. Carried in
NetworkSpec::tls.