Enum Reach 

pub enum Reach {
    Ok,
    NoRouteOutbound {
        dest: String,
        needed: Route,
    },
    NoHairpin {
        dest: String,
        port: u16,
    },
    Refused {
        dest: String,
        port: u16,
    },
    Dropped {
        dest: String,
        port: u16,
    },
}

The answer to “can THIS box reach THAT address, from where it is standing”.

Variants

Ok

NoRouteOutbound

The packet had nowhere to go. The destination is off this guest’s own prefix and it never installed the route that would have taken it there. Inbound to this same guest still works — see inbound_reaches.

Fields

dest: String

needed: Route

NoHairpin

Locally-generated traffic does not traverse prerouting. This box DNATs that port on that address for everyone else, and not for itself.

Fields

dest: String

port: u16

Refused

Nothing is listening.

Fields

dest: String

port: u16

Dropped

Behaviour 62: the firewall dropped it. Silence until the caller’s own timeout — NOT a refusal. MEASURED 2026-09-20: the twin’s :2222 was refused from one host (admitted, nothing listening) and timed out from the other (dropped), and the timeout read as “slow”.

Fields

dest: String

port: u16

Implementations

impl Reach

pub fn is_ok(&self) -> bool

pub fn why(&self) -> String

The sentence a caller sees. NoHairpin deliberately reads connection refused, because that is what the kernel actually returns and what sent somebody looking at a healthy forge.

Trait Implementations

impl Clone for Reach

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Reach

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Reach

impl PartialEq for Reach

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Reach