pub struct NetworkSpec {
pub enabled: bool,
pub interface: Option<InterfaceOverrides>,
pub ports: Vec<PublishedPortSpec>,
pub policy: Option<NetworkPolicy>,
pub dns: Option<DnsConfig>,
pub tls: Option<TlsConfig>,
pub secrets: Option<SecretsConfig>,
pub max_connections: Option<usize>,
pub trust_host_cas: bool,
}Expand description
Complete network specification for a sandbox.
All subdocuments are typed. The local-engine policy, dns, and
interface configs are mirrored here as wire types whose leaf values
(CIDRs, domain names, nameservers) are carried in their canonical string
form; the network engine re-parses these into its richer internal types at
load time, which keeps that engine’s validation crates out of this shared
contract.
Fields§
§enabled: boolWhether networking is enabled for this sandbox.
interface: Option<InterfaceOverrides>Guest interface overrides for the local network engine.
ports: Vec<PublishedPortSpec>Host-to-guest port mappings.
policy: Option<NetworkPolicy>Egress and ingress policy.
dns: Option<DnsConfig>DNS interception and filtering.
tls: Option<TlsConfig>TLS-interception subdocument (see TlsConfig).
secrets: Option<SecretsConfig>Placeholder-based secret-injection subdocument (see SecretsConfig).
max_connections: Option<usize>Max concurrent guest connections.
trust_host_cas: boolWhether to copy trusted host CAs into the guest at boot.
Trait Implementations§
Source§impl Clone for NetworkSpec
impl Clone for NetworkSpec
Source§fn clone(&self) -> NetworkSpec
fn clone(&self) -> NetworkSpec
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more