Struct HaProxyStrictness 

pub struct HaProxyStrictness {
    pub max_header_length: usize,
    pub verify_crc32c_when_present: bool,
    pub require_crc32c: bool,
    pub reject_unknown_address_family: bool,
    pub reject_local_command: bool,
    pub fail_on_malformed_tlv: bool,
}

Configurable strictness toggles for the PROXY protocol server.

The defaults follow rama’s proxy-first philosophy: be lenient with what is accepted from the wire (the protocol is regularly served by upstream software that diverges slightly from the spec) while still enforcing the security-critical invariants required by the specification (in particular, section 2.2.5: a present PP2_TYPE_CRC32C TLV “MUST be verified”).

All knobs are opt-in towards stricter behaviour. Self::strict turns on every spec-mandated check; Self::reject_local_command is intentionally left off there because the spec explicitly permits the LOCAL command — flip it on per-deployment if you want to reject it.

Fields

max_header_length: usize

Maximum number of bytes accepted for a single PROXY header. Default: 16 + u16::MAX — the largest spec-legal v2 header.

verify_crc32c_when_present: bool

When true and a PP2_TYPE_CRC32C TLV is present, the header is rejected if the CRC32C value does not match the recomputed value. Default: true (spec MUST in section 2.2.5).

require_crc32c: bool

When true, reject any v2 header that does not carry a CRC32C TLV. Default: false.

reject_unknown_address_family: bool

When true, reject v1 UNKNOWN and v2 AF_UNSPEC headers. Default: false.

reject_local_command: bool

When true, reject v2 headers using the LOCAL command. The spec mandates ignoring address info in LOCAL connections, which rama always does — this flag goes one step further and treats a LOCAL frame as an error rather than passing the connection through. Default: false.

fail_on_malformed_tlv: bool

When true, a v2 header is rejected if its TLV area cannot be parsed in full (truncated TLV, advertised length beyond available bytes). Default: false.

Implementations

impl HaProxyStrictness

pub const fn lenient() -> Self

A maximally lenient configuration — nothing is rejected beyond what the parser itself can already not understand (invalid version byte etc.). CRC32C verification is also disabled.

pub const fn strict() -> Self

A strict configuration suitable for trusted-frontline gateways that want to enforce every spec-mandated check.

Note: Self::reject_local_command is left off here because the spec explicitly permits the LOCAL command (the receiver is required to accept the connection and ignore the address info, which rama always does). Enable it separately if your deployment wants to refuse LOCAL frames.

Trait Implementations

impl Clone for HaProxyStrictness

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for HaProxyStrictness

impl Debug for HaProxyStrictness

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HaProxyStrictness

fn default() -> Self

Returns the “default value” for a type.