Struct TlsConfig 

pub struct TlsConfig {
    pub enabled: bool,
    pub intercepted_ports: Vec<u16>,
    pub bypass: Vec<String>,
    pub verify_upstream: bool,
    pub block_quic_on_intercept: bool,
    pub upstream_ca_cert: Vec<PathBuf>,
    pub scoped_upstream_ca_cert: Vec<ScopedUpstreamCaCert>,
    pub scoped_verify_upstream: Vec<ScopedVerifyUpstream>,
    pub intercept_ca: InterceptCaConfig,
    pub cache: CertCacheConfig,
}

TLS interception configuration. Carried in NetworkSpec::tls.

The local network engine terminates TCP at its in-process stack, so TLS MITM is handled by proxy tasks — these fields configure which ports/domains are intercepted and how the interception CA is sourced.

Fields

enabled: bool

Whether TLS interception is enabled.

intercepted_ports: Vec<u16>

TCP ports subject to TLS interception (default: [443]).

bypass: Vec<String>

Domains to bypass (no MITM). Supports exact match and *.suffix wildcards.

verify_upstream: bool

Whether to verify the upstream server’s TLS certificate.

block_quic_on_intercept: bool

Drop UDP to intercepted ports when TLS interception is active, forcing QUIC traffic to fall back to TCP/TLS.

upstream_ca_cert: Vec<PathBuf>

CA certificate PEM files to trust for upstream server verification.

scoped_upstream_ca_cert: Vec<ScopedUpstreamCaCert>

Host-scoped CA certificate PEM files to trust for upstream server verification.

scoped_verify_upstream: Vec<ScopedVerifyUpstream>

Host-scoped upstream verification overrides.

intercept_ca: InterceptCaConfig

Interception CA configuration. The TLS proxy uses this CA to sign per-domain certs it presents to the guest during interception.

cache: CertCacheConfig

Per-domain certificate cache configuration.

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> TlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for TlsConfig

fn default() -> TlsConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TlsConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<TlsConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TlsConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.