pub fn is_forbidden_address(ip: IpAddr) -> boolExpand description
Whether the proxy must refuse to connect to this address on a tenant’s behalf.
True for everything that is not ordinary public unicast: loopback, private
(RFC 1918, and ULA for IPv6), link-local – which includes
169.254.169.254, every cloud’s metadata service – CGNAT, unspecified,
multicast, broadcast, the documentation and benchmarking ranges, and the
IETF-reserved blocks. IPv6 forms that carry an IPv4 address (mapped,
compatible, NAT64, 6to4) are judged by the address they carry, since that is
where the packet ends up.
Shared by domain verification, which connects, and backend validation, which stores an address something will connect to later.