pub struct NetworkSpec {
pub enabled: bool,
pub interface: Option<InterfaceOverrides>,
pub ports: Vec<PublishedPortSpec>,
pub policy: Option<NetworkPolicy>,
pub dns: Option<DnsConfig>,
pub tls: Option<TlsConfig>,
pub secrets: Option<SecretsConfig>,
pub max_connections: Option<usize>,
pub rate_limiter: Option<NetworkRateLimiterConfig>,
pub trust_host_cas: bool,
pub outbound_proxy: Option<OutboundProxy>,
}Expand description
Complete network specification for a sandbox.
Common, backend-visible fields are typed directly. Rich local-engine subdocuments such as policy, DNS, TLS, secrets, and interface overrides are carried as JSON so the shared contract can preserve them without depending on the local networking engine crate.
Fields§
§enabled: boolWhether networking is enabled for this sandbox.
interface: Option<InterfaceOverrides>Guest interface overrides for the local network engine.
ports: Vec<PublishedPortSpec>Host-to-guest port mappings.
policy: Option<NetworkPolicy>Egress and ingress policy subdocument.
dns: Option<DnsConfig>DNS interception and filtering subdocument.
tls: Option<TlsConfig>TLS interception subdocument.
secrets: Option<SecretsConfig>Secret injection subdocument.
max_connections: Option<usize>Max concurrent guest connections.
rate_limiter: Option<NetworkRateLimiterConfig>Local network rate limits. Missing means unlimited in both directions.
trust_host_cas: boolWhether to copy trusted host CAs into the guest at boot.
outbound_proxy: Option<OutboundProxy>Proxy used for outbound sandbox connections and supported datagram flows.
Trait Implementations§
Source§impl Clone for NetworkSpec
impl Clone for NetworkSpec
Source§fn clone(&self) -> NetworkSpec
fn clone(&self) -> NetworkSpec
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more