Struct ProxyService 

pub struct ProxyService { /* private fields */ }

Proxy service that handles incoming HTTP connections.

Implementations

impl ProxyService

pub fn new( config: Arc<RwLock<ProxyConfig>>, health_checker: Arc<HealthChecker>, rate_limiter: Arc<RateLimiter>, ) -> Self

Create a new proxy service.

pub async fn load_config(&self)

Load configuration into the backend manager.

pub async fn serve_http( self: Arc<Self>, addr: SocketAddr, cancel_token: CancellationToken, ) -> Result<()>

Start the HTTP proxy server.

pub async fn serve_https( self: Arc<Self>, addr: SocketAddr, tls_config: Arc<ServerConfig>, cancel_token: CancellationToken, ) -> Result<()>

Serve HTTPS, negotiating the protocol with ALPN.

ALPN is the whole point: without it a TLS listener negotiates nothing and every client falls back to HTTP/1.1, which leaves HTTP/2 reachable only as cleartext h2c and WebSocket only as ws://.

Because ALPN decides the protocol rather than guessing it, the h2 path can use the HTTP/2 builder directly instead of sniffing – so, unlike the cleartext port, an invalid preface here is answered with a proper GOAWAY.

pub async fn serve_h2c( self: Arc<Self>, addr: SocketAddr, cancel_token: CancellationToken, ) -> Result<()>

Serve HTTP/2 only, on a dedicated port.

The main listener negotiates by sniffing the opening bytes, which is why a corrupted HTTP/2 preface there gets an HTTP/1 400 instead of GOAWAY(PROTOCOL_ERROR): it cannot be told apart from a malformed HTTP/1 request (h2spec 3.5). A listener that only ever speaks HTTP/2 has no such ambiguity and answers the way the RFC asks.

This is additive. The main port still serves HTTP/1.1 and h2c together; nothing is given up by enabling it.