Enum BuildError 

pub enum BuildError {
    DirectionNotSet {
        rule_index: usize,
    },
    MissingDestination {
        rule_index: usize,
    },
    InvalidIp {
        rule_index: usize,
        raw: String,
    },
    InvalidCidr {
        rule_index: usize,
        raw: String,
    },
    InvalidIpv4Pool {
        raw: String,
    },
    InvalidIpv6Pool {
        raw: String,
    },
    InvalidOutboundProxy {
        reason: String,
    },
    MaxConnectionsExceeded {
        configured: usize,
        limit: usize,
    },
    IncompleteInterceptCaConfig,
    InvalidDomain {
        rule_index: usize,
        raw: String,
        source: DomainNameError,
    },
    InvalidPortRange {
        rule_index: usize,
        lo: u16,
        hi: u16,
    },
    IngressDoesNotSupportIcmp {
        rule_index: usize,
    },
    InvalidSecretConfig {
        source: SecretConfigError,
    },
    InvalidRateLimitConfig {
        direction: NetworkRateLimitDirection,
        source: RateLimitConfigError,
    },
    EmptyNetworkRateLimiter,
    RateLimitBurstWithoutBucket {
        direction: NetworkRateLimitDirection,
        bucket: &'static str,
    },
    RateLimitRefillTooShort {
        direction: NetworkRateLimitDirection,
        bucket: &'static str,
    },
    RateLimitRefillPrecision {
        direction: NetworkRateLimitDirection,
        bucket: &'static str,
    },
    RateLimitRefillTooLong {
        direction: NetworkRateLimitDirection,
        bucket: &'static str,
    },
}

Errors surfaced by NetworkPolicyBuilder::build and the related nested builders (crate::config::DnsBuilder::build, crate::config::NetworkBuilder::build).

All these builders accumulate errors lazily — string inputs are stored raw and only parsed at .build() time, where the first failure is returned. The same enum covers both rule-grammar failures (with a rule_index) and DNS-block-list failures (no rule index, since DNS blocks aren’t rules).

Variants

DirectionNotSet

A rule was committed without setting a direction first.

Fields

rule_index: usize

MissingDestination

A rule was committed via .allow() / .deny() but no destination method was called on the resulting RuleDestinationBuilder.

Fields

rule_index: usize

InvalidIp

.ip(&str) received a value that doesn’t parse as an IPv4 or IPv6 address.

Fields

rule_index: usize

raw: String

InvalidCidr

.cidr(&str) received a value that doesn’t parse as a CIDR.

Fields

rule_index: usize

raw: String

InvalidIpv4Pool

The configured guest IPv4 pool cannot hold a /30 sandbox subnet.

Fields

raw: String

InvalidIpv6Pool

The configured guest IPv6 pool cannot hold a /64 sandbox prefix.

Fields

raw: String

InvalidOutboundProxy

An outbound proxy builder received an invalid configuration.

Fields

reason: String

Protocol-specific builder error.

MaxConnectionsExceeded

The configured connection limit is above the network stack’s hard cap.

Fields

configured: usize

Requested connection limit.

limit: usize

Hard cap enforced by the network stack.

IncompleteInterceptCaConfig

Exactly one TLS intercept CA path was configured.

InvalidDomain

.domain(&str) or .domain_suffix(&str) received a value that doesn’t parse as a DomainName.

Fields

rule_index: usize

raw: String

source: DomainNameError

InvalidPortRange

.port_range(lo, hi) received lo > hi.

Fields

rule_index: usize

lo: u16

hi: u16

IngressDoesNotSupportIcmp

An ICMP protocol (icmpv4 / icmpv6) appears in a rule whose direction is Ingress or Any. publisher.rs has no inbound ICMP path; ingress ICMP rules would be dead code.

Fields

rule_index: usize

InvalidSecretConfig

A secret entry failed validation.

Fields

source: SecretConfigError

Underlying secret validation error.

InvalidRateLimitConfig

A rate limiter failed validation.

Fields

direction: NetworkRateLimitDirection

Which limiter is invalid: egress or ingress.

source: RateLimitConfigError

Underlying rate limit validation error.

EmptyNetworkRateLimiter

A network rate limiter was configured without either direction.

RateLimitBurstWithoutBucket

A one-time burst was set without its corresponding bucket.

Fields

direction: NetworkRateLimitDirection

Which limiter is invalid: egress or ingress.

bucket: &'static str

The bucket the burst belongs to: bandwidth or ops.

RateLimitRefillTooShort

A rate limiter refill interval is shorter than the wire format supports.

Fields

direction: NetworkRateLimitDirection

Which limiter is invalid: egress or ingress.

bucket: &'static str

The bucket with the short interval: bandwidth or ops.

RateLimitRefillPrecision

A rate limiter refill interval cannot be represented exactly in milliseconds.

Fields

direction: NetworkRateLimitDirection

Which limiter is invalid: egress or ingress.

bucket: &'static str

The bucket with the fractional-millisecond interval: bandwidth or ops.

RateLimitRefillTooLong

A rate limiter refill interval does not fit in u64 milliseconds.

Fields

direction: NetworkRateLimitDirection

Which limiter is invalid: egress or ingress.

bucket: &'static str

The bucket with the overflowing interval: bandwidth or ops.

Trait Implementations

impl Clone for BuildError

fn clone(&self) -> BuildError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BuildError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for BuildError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for BuildError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<SecretConfigError> for BuildError

fn from(source: SecretConfigError) -> Self

Converts to this type from the input type.