Struct ProxyFilter 

pub struct ProxyFilter { /* private fields */ }

Async wrapper around HostFilter that performs DNS resolution.

Implementations

impl ProxyFilter

pub fn new(allowed_hosts: &[String]) -> Self

Create a new proxy filter with the given allowed hosts.

pub fn allow_all() -> Self

Create a filter that allows all hosts (except cloud metadata).

pub async fn check_host(&self, host: &str, port: u16) -> Result<CheckResult>

Check a host against the filter with async DNS resolution.

Resolves the hostname to IP addresses, then checks all resolved IPs against the link-local deny range (cloud metadata SSRF protection). If any resolved IP is link-local, the request is blocked.

On success, returns both the filter result and the resolved socket addresses. Callers MUST use resolved_addrs to connect to the upstream instead of re-resolving the hostname, eliminating the DNS rebinding TOCTOU window.

pub fn check_host_with_ips( &self, host: &str, resolved_ips: &[IpAddr], ) -> FilterResult

Check a host with pre-resolved IPs (no DNS lookup).

pub fn allowed_count(&self) -> usize

Number of allowed hosts configured.

Trait Implementations

impl Clone for ProxyFilter

fn clone(&self) -> ProxyFilter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProxyFilter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.