Skip to main content

rust_web_server/server/
mod.rs

1#[cfg(test)]
2pub mod tests;
3#[cfg(test)]
4mod example;
5
6use std::io::prelude::*;
7use std::borrow::Borrow;
8use std::net::{IpAddr, SocketAddr, TcpListener};
9use std::str::FromStr;
10use std::time::Duration;
11
12use crate::request::{METHOD, Request};
13use crate::response::{Response, STATUS_CODE_REASON_PHRASE};
14use crate::app::App;
15use crate::application::Application;
16use crate::core::{New};
17use crate::entry_point::{bootstrap, get_ip_port_thread_count, get_request_allocation_size, set_default_values};
18use crate::header::Header;
19use crate::log::Log;
20use crate::mime_type::MimeType;
21use crate::range::{ContentRange, Range};
22use crate::symbol::SYMBOL;
23use crate::thread_pool::ThreadPool;
24
25pub struct Server {}
26impl Server {
27    pub fn process_request(mut stream: impl Read + Write + Unpin, peer_addr: SocketAddr) -> Vec<u8> {
28        let request_allocation_size = get_request_allocation_size();
29        let mut buffer = vec![0; request_allocation_size as usize];
30        let boxed_read = stream.read(&mut buffer);
31        if boxed_read.is_err() {
32            let message = boxed_read.err().unwrap().to_string();
33            eprintln!("unable to read TCP stream {}", &message);
34
35            let raw_response = Server::bad_request_response(message);
36            let boxed_stream = stream.write(raw_response.borrow());
37            if boxed_stream.is_ok() {
38                stream.flush().unwrap();
39            };
40            return raw_response;
41        }
42
43        boxed_read.unwrap();
44        let request : &[u8] = &buffer;
45
46        // let raw_request = String::from_utf8(Vec::from(request)).unwrap();
47        // println!("\n\n______{}______\n\n", raw_request);
48
49
50        let boxed_request = Request::parse_request(request);
51        if boxed_request.is_err() {
52            let message = boxed_request.err().unwrap();
53            eprintln!("unable to parse request: {}", &message);
54
55            let raw_response = Server::bad_request_response(message);
56            let boxed_stream = stream.write(raw_response.borrow());
57            if boxed_stream.is_ok() {
58                stream.flush().unwrap();
59            };
60            return raw_response;
61        }
62
63
64        let request: Request = boxed_request.unwrap();
65        let (response, request) = App::handle_request(request);
66
67
68        let log_request_response = Log::combined(&request, &response, &peer_addr);
69        println!("{}", log_request_response);
70        let raw_response = Response::generate_response(response, request);
71
72        let boxed_stream = stream.write(raw_response.borrow());
73        if boxed_stream.is_ok() {
74            stream.flush().unwrap();
75        };
76
77        raw_response
78    }
79
80    pub fn bad_request_response(message: String) -> Vec<u8> {
81        let error_request = Request {
82            method: METHOD.get.to_string(),
83            request_uri: "".to_string(),
84            http_version: "".to_string(),
85            headers: vec![],
86            body: vec![],
87        };
88
89        let size = message.chars().count() as u64;
90        let content_range = ContentRange {
91            unit: Range::BYTES.to_string(),
92            range: Range { start: 0, end: size },
93            size: size.to_string(),
94            body: Vec::from(message.as_bytes()),
95            content_type: MimeType::TEXT_PLAIN.to_string(),
96        };
97
98        let header_list = Header::get_header_list(&error_request);
99        let error_response: Response = Response::get_response(
100            STATUS_CODE_REASON_PHRASE.n400_bad_request,
101            Some(header_list),
102            Some(vec![content_range])
103        );
104
105        let response = Response::generate_response(error_response, error_request);
106        return response;
107    }
108
109    pub fn process(mut stream: impl Read + Write + Unpin,
110                   connection: ConnectionInfo,
111                   app: impl Application) -> Result<(), String> {
112        use crate::http::VERSION;
113
114        let request_allocation_size = connection.request_size;
115        let client = connection.client.clone();
116        let client_addr = SocketAddr::new(IpAddr::from_str(client.ip.as_str()).unwrap(), client.port as u16);
117
118        loop {
119            let mut buffer = vec![0; request_allocation_size as usize];
120            let boxed_read = stream.read(&mut buffer);
121            if boxed_read.is_err() {
122                // timeout or client closed — normal end of keep-alive session
123                break;
124            }
125            if boxed_read.unwrap() == 0 {
126                break;
127            }
128
129            let request = match Request::parse(&buffer) {
130                Ok(r) => r,
131                Err(message) => {
132                    let raw_response = Server::bad_request_response(message.clone());
133                    let boxed_stream = stream.write(raw_response.borrow());
134                    if boxed_stream.is_ok() { stream.flush().unwrap(); }
135                    return Err(message);
136                }
137            };
138
139            let keep_alive = {
140                let conn_hdr = request.get_header(Header::_CONNECTION.to_string());
141                match conn_hdr {
142                    Some(h) => h.value.to_lowercase() != "close",
143                    None => request.http_version == VERSION.http_1_1,
144                }
145            };
146
147            let mut response = match app.execute(&request, &connection) {
148                Ok(r) => r,
149                Err(message) => {
150                    let raw_response = Server::bad_request_response(message.clone());
151                    let boxed_stream = stream.write(raw_response.borrow());
152                    if boxed_stream.is_ok() { stream.flush().unwrap(); }
153                    return Err(message);
154                }
155            };
156
157            crate::metrics::record_request();
158            crate::compression::apply_gzip(&request, &mut response);
159
160            response.headers.push(Header {
161                name: Header::_CONNECTION.to_string(),
162                value: if keep_alive { "keep-alive".to_string() } else { "close".to_string() },
163            });
164
165            Log::log_access(&request, &response, &client_addr);
166
167            if let Some(ref filepath) = response.stream_file.clone() {
168                if let Err(e) = Server::write_chunked_file(&mut stream, response, request, filepath) {
169                    return Err(e);
170                }
171            } else {
172                let raw_response = Response::generate_response(response, request);
173                if let Err(e) = stream.write(raw_response.borrow()) {
174                    return Err(e.to_string());
175                }
176                stream.flush().unwrap();
177            }
178
179            if !keep_alive { break; }
180        }
181
182        Ok(())
183    }
184
185    /// Streams a file to `stream` using HTTP/1.1 chunked transfer encoding.
186    /// The response headers are written first, then the file is read and written in 64 KB chunks.
187    pub(crate) fn write_chunked_file(
188        stream: &mut impl Write,
189        mut response: Response,
190        request: Request,
191        filepath: &str,
192    ) -> Result<(), String> {
193        use std::fs::File;
194        use std::io::Read as _;
195
196        response.headers.push(Header {
197            name: Header::_TRANSFER_ENCODING.to_string(),
198            value: "chunked".to_string(),
199        });
200
201        // build status line + headers (no body)
202        let status = [
203            response.http_version.clone(),
204            response.status_code.to_string(),
205            response.reason_phrase.clone(),
206        ].join(SYMBOL.whitespace);
207
208        let mut headers_str = SYMBOL.new_line_carriage_return.to_string();
209        for header in &response.headers {
210            headers_str.push_str(&header.name);
211            headers_str.push_str(Header::NAME_VALUE_SEPARATOR);
212            headers_str.push_str(&header.value);
213            headers_str.push_str(SYMBOL.new_line_carriage_return);
214        }
215        let head = format!("{}{}{}", status, headers_str, SYMBOL.new_line_carriage_return);
216
217        stream.write_all(head.as_bytes()).map_err(|e| e.to_string())?;
218
219        if request.method != METHOD.head && request.method != METHOD.options {
220            let mut file = File::open(filepath).map_err(|e| e.to_string())?;
221            let mut buf = vec![0u8; 65536];
222            loop {
223                let n = file.read(&mut buf).map_err(|e| e.to_string())?;
224                if n == 0 { break; }
225                // chunk header: hex size + CRLF
226                stream.write_all(format!("{:x}\r\n", n).as_bytes()).map_err(|e| e.to_string())?;
227                stream.write_all(&buf[..n]).map_err(|e| e.to_string())?;
228                stream.write_all(b"\r\n").map_err(|e| e.to_string())?;
229            }
230            // terminal chunk
231            stream.write_all(b"0\r\n\r\n").map_err(|e| e.to_string())?;
232        }
233
234        stream.flush().map_err(|e| e.to_string())
235    }
236
237    /// Reads configuration (IP, port, thread count, TLS paths) from the layered config system
238    /// and returns a bound `TcpListener` and a sized `ThreadPool`. Call once at startup.
239    pub fn setup() -> Result<(TcpListener, ThreadPool), String> {
240        let info = Log::info("Rust Web Server");
241        println!("{}", info);
242
243        let usage_info = Log::usage_information();
244        println!("{}", usage_info);
245
246
247        println!("RWS Configuration Start: \n");
248
249        set_default_values();
250        bootstrap();
251
252        println!("\nRWS Configuration End\n\n");
253
254
255        let (ip, port, thread_count) = get_ip_port_thread_count();
256
257
258        let mut ip_readable = ip.to_string();
259
260        if ip.contains(":") {
261            ip_readable = [SYMBOL.opening_square_bracket, &ip, SYMBOL.closing_square_bracket].join("");
262        }
263
264        let bind_addr = [ip_readable, SYMBOL.colon.to_string(), port.to_string()].join(SYMBOL.empty_string);
265
266        #[cfg(feature = "http2")]
267        let protocol = {
268            let cert = std::env::var(crate::entry_point::Config::RWS_CONFIG_TLS_CERT_FILE).unwrap_or_default();
269            if cert.is_empty() { "http" } else { "https" }
270        };
271        #[cfg(not(feature = "http2"))]
272        let protocol = "http";
273
274        println!("Setting up {}://{}...", protocol, &bind_addr);
275
276        let boxed_listener = TcpListener::bind(&bind_addr);
277        if boxed_listener.is_err() {
278            let message = format!("unable to set up TCP listener: {}", boxed_listener.err().unwrap());
279            return Err(message);
280        }
281
282        let listener = boxed_listener.unwrap();
283        let pool = ThreadPool::new(thread_count as usize);
284
285
286        let server_url_thread_count = Log::server_url_thread_count(protocol, &bind_addr, thread_count);
287        println!("{}", server_url_thread_count);
288
289        Ok((listener, pool))
290    }
291
292    /// Accepts TCP connections in a loop and dispatches each to the thread pool.
293    ///
294    /// When built with the `http1` feature, Ctrl+C and SIGTERM stop the accept
295    /// loop gracefully: `SERVER_READY` is cleared and the pool drains all
296    /// in-flight connections before returning.
297    ///
298    /// For TLS/HTTP2/HTTP3 use [`Server::run_tls`].
299    pub fn run(listener: TcpListener,
300               pool: ThreadPool,
301               app: impl Application + New + Send + 'static + Copy) {
302        #[cfg(feature = "http1")]
303        {
304            use std::sync::Arc;
305            use std::sync::atomic::{AtomicBool, Ordering};
306
307            let shutdown = Arc::new(AtomicBool::new(false));
308            let s = shutdown.clone();
309            if let Err(e) = ctrlc::set_handler(move || {
310                s.store(true, Ordering::SeqCst);
311            }) {
312                eprintln!("unable to install signal handler: {}", e);
313            }
314            if let Err(e) = listener.set_nonblocking(true) {
315                eprintln!("unable to set non-blocking listener: {}", e);
316            }
317
318            loop {
319                if shutdown.load(Ordering::SeqCst) {
320                    break;
321                }
322                match listener.accept() {
323                    Ok((stream, peer_addr)) => {
324                        Server::dispatch_connection(stream, peer_addr, &pool, app);
325                    }
326                    Err(ref e) if e.kind() == std::io::ErrorKind::WouldBlock => {
327                        std::thread::sleep(Duration::from_millis(10));
328                    }
329                    Err(e) => {
330                        eprintln!("accept error: {}", e);
331                        break;
332                    }
333                }
334            }
335
336            crate::metrics::SERVER_READY.store(false, std::sync::atomic::Ordering::SeqCst);
337            println!("Shutting down — waiting for in-flight connections to finish");
338            pool.join();
339            println!("Server stopped");
340        }
341
342        #[cfg(not(feature = "http1"))]
343        {
344            for boxed_stream in listener.incoming() {
345                match boxed_stream {
346                    Err(e) => {
347                        eprintln!("unable to get TCP stream: {}", e);
348                        return;
349                    }
350                    Ok(stream) => {
351                        let peer_addr = match stream.peer_addr() {
352                            Ok(a) => a,
353                            Err(e) => {
354                                eprintln!("unable to read peer addr: {}", e);
355                                return;
356                            }
357                        };
358                        Server::dispatch_connection(stream, peer_addr, &pool, app);
359                    }
360                }
361            }
362        }
363    }
364
365    fn dispatch_connection(
366        stream: std::net::TcpStream,
367        peer_addr: std::net::SocketAddr,
368        pool: &ThreadPool,
369        app: impl Application + New + Send + 'static + Copy,
370    ) {
371        print!("Connection established, ");
372        if let Ok(local) = stream.local_addr() {
373            print!("local addr: {}", local);
374        }
375        println!(", peer addr: {}", peer_addr);
376
377        let (server_ip, server_port, _thread_count) = get_ip_port_thread_count();
378        let connection = ConnectionInfo {
379            client: Address {
380                ip: peer_addr.ip().to_string(),
381                port: peer_addr.port() as i32,
382            },
383            server: Address {
384                ip: server_ip,
385                port: server_port,
386            },
387            request_size: get_request_allocation_size(),
388        };
389
390        if let Err(e) = stream.set_read_timeout(Some(Duration::from_secs(30))) {
391            eprintln!("failed to set read timeout: {}", e);
392        }
393
394        pool.execute(move || {
395            crate::metrics::connection_open();
396            let result = Server::process(stream, connection, app);
397            crate::metrics::connection_close();
398            if let Err(msg) = result {
399                crate::metrics::record_error();
400                eprintln!("{}", msg);
401            }
402        });
403    }
404
405}
406
407/// Network context for the current connection, passed into every [`Controller`](crate::controller::Controller).
408#[derive(Clone)]
409pub struct ConnectionInfo {
410    /// Client (peer) address.
411    pub client: Address,
412    /// Server (local) address.
413    pub server: Address,
414    /// Bytes allocated for reading the request.
415    pub request_size: i64
416}
417
418/// IP address and port pair.
419#[derive(Clone)]
420pub struct Address {
421    pub ip: String,
422    pub port: i32
423}
424
425/// Resolves when SIGTERM is received on Unix, or never on other platforms.
426/// Enables a single `select!` branch to handle both SIGTERM and Ctrl+C.
427#[cfg(feature = "http2")]
428async fn sigterm() {
429    #[cfg(unix)]
430    {
431        if let Ok(mut s) = tokio::signal::unix::signal(
432            tokio::signal::unix::SignalKind::terminate()
433        ) {
434            s.recv().await;
435        } else {
436            std::future::pending::<()>().await
437        }
438    }
439    #[cfg(not(unix))]
440    std::future::pending::<()>().await
441}
442
443#[cfg(feature = "http2")]
444impl Server {
445    pub async fn run_tls(
446        listener: TcpListener,
447        pool: ThreadPool,
448        app: impl Application + New + Send + 'static + Copy,
449    ) {
450        use crate::tls::create_tls_acceptor;
451        use crate::h2_handler;
452
453        let cert_path = std::env::var(crate::entry_point::Config::RWS_CONFIG_TLS_CERT_FILE)
454            .unwrap_or_default();
455        let key_path = std::env::var(crate::entry_point::Config::RWS_CONFIG_TLS_KEY_FILE)
456            .unwrap_or_default();
457
458        if cert_path.is_empty() || key_path.is_empty() {
459            println!("No TLS certificate configured — serving plain HTTP/1.1.");
460            tokio::task::block_in_place(|| Server::run(listener, pool, app));
461            return;
462        }
463
464        let tls_acceptor = match create_tls_acceptor(&cert_path, &key_path) {
465            Ok(a) => a,
466            Err(e) => {
467                eprintln!("TLS setup failed: {}", e);
468                return;
469            }
470        };
471
472        listener
473            .set_nonblocking(true)
474            .expect("failed to set TCP listener to non-blocking");
475        let tokio_listener = tokio::net::TcpListener::from_std(listener)
476            .expect("failed to convert TCP listener to tokio");
477
478        println!("Listening for TLS connections (HTTP/1.1 + HTTP/2)...");
479
480        loop {
481            tokio::select! {
482                result = tokio_listener.accept() => {
483                    match result {
484                        Ok((tcp_stream, peer_addr)) => {
485                            let acceptor = tls_acceptor.clone();
486                            tokio::spawn(async move {
487                                match acceptor.accept(tcp_stream).await {
488                                    Ok(tls_stream) => {
489                                        let protocol = tls_stream
490                                            .get_ref()
491                                            .1
492                                            .alpn_protocol()
493                                            .map(|p| p.to_vec());
494
495                                        match protocol.as_deref() {
496                                            Some(b"h2") => {
497                                                if let Err(e) =
498                                                    h2_handler::handle_connection(tls_stream, peer_addr, app)
499                                                        .await
500                                                {
501                                                    eprintln!("H2 connection error: {}", e);
502                                                }
503                                            }
504                                            _ => {
505                                                if let Err(e) =
506                                                    Server::process_h1_tls(tls_stream, peer_addr, app).await
507                                                {
508                                                    eprintln!("H1 TLS error: {}", e);
509                                                }
510                                            }
511                                        }
512                                    }
513                                    Err(e) => eprintln!("TLS handshake failed: {}", e),
514                                }
515                            });
516                        }
517                        Err(e) => eprintln!("TCP accept error: {}", e),
518                    }
519                }
520                _ = tokio::signal::ctrl_c() => {
521                    crate::metrics::SERVER_READY.store(false, std::sync::atomic::Ordering::SeqCst);
522                    println!("\nShutting down gracefully (SIGINT).");
523                    break;
524                }
525                _ = sigterm() => {
526                    crate::metrics::SERVER_READY.store(false, std::sync::atomic::Ordering::SeqCst);
527                    println!("\nShutting down gracefully (SIGTERM).");
528                    break;
529                }
530            }
531        }
532    }
533
534    /// Binds a plain-HTTP listener on the port in `RWS_CONFIG_HTTP_REDIRECT_PORT` and sends
535    /// `301 Moved Permanently` to the HTTPS equivalent of every incoming URL.
536    /// Returns immediately if TLS is not configured or the redirect port is not set.
537    pub async fn run_redirect() {
538        use std::env;
539        use tokio::io::{AsyncReadExt, AsyncWriteExt};
540        use tokio::net::TcpListener as TokioListener;
541
542        let cert_path = env::var(crate::entry_point::Config::RWS_CONFIG_TLS_CERT_FILE)
543            .unwrap_or_default();
544        if cert_path.is_empty() {
545            return;
546        }
547
548        let redirect_port_str = env::var(crate::entry_point::Config::RWS_CONFIG_HTTP_REDIRECT_PORT)
549            .unwrap_or_default();
550        if redirect_port_str.is_empty() {
551            return;
552        }
553
554        let redirect_port: u16 = match redirect_port_str.parse() {
555            Ok(p) => p,
556            Err(_) => {
557                eprintln!("Invalid RWS_CONFIG_HTTP_REDIRECT_PORT: {}", redirect_port_str);
558                return;
559            }
560        };
561
562        let (server_ip, server_port, _) = get_ip_port_thread_count();
563        let bind_addr = format!("{}:{}", server_ip, redirect_port);
564
565        let listener = match TokioListener::bind(&bind_addr).await {
566            Ok(l) => l,
567            Err(e) => {
568                eprintln!("HTTP redirect listener error on {}: {}", bind_addr, e);
569                return;
570            }
571        };
572
573        println!("HTTP→HTTPS redirect listening on http://{}:{}", server_ip, redirect_port);
574
575        loop {
576            tokio::select! {
577                result = listener.accept() => {
578                    match result {
579                        Ok((mut stream, _peer)) => {
580                            let https_port = server_port;
581                            tokio::spawn(async move {
582                                let mut buf = vec![0u8; 4096];
583                                let n = match stream.read(&mut buf).await {
584                                    Ok(n) => n,
585                                    Err(_) => return,
586                                };
587                                let text = String::from_utf8_lossy(&buf[..n]);
588
589                                let uri = text.lines()
590                                    .next()
591                                    .and_then(|line| line.split_whitespace().nth(1))
592                                    .unwrap_or("/")
593                                    .to_string();
594
595                                let host_header = text.lines()
596                                    .find(|l| l.to_lowercase().starts_with("host:"))
597                                    .map(|l| l[5..].trim().to_string());
598
599                                let location = match host_header {
600                                    Some(h) => {
601                                        // strip existing port from Host header
602                                        let h_no_port = if h.starts_with('[') {
603                                            // IPv6: [::1] or [::1]:port
604                                            h.find(']')
605                                                .map(|i| h[..=i].to_string())
606                                                .unwrap_or(h.clone())
607                                        } else {
608                                            h.rfind(':')
609                                                .map(|i| h[..i].to_string())
610                                                .unwrap_or(h.clone())
611                                        };
612                                        if https_port == 443 {
613                                            format!("https://{}{}", h_no_port, uri)
614                                        } else {
615                                            format!("https://{}:{}{}", h_no_port, https_port, uri)
616                                        }
617                                    }
618                                    None => format!("https://localhost:{}{}", https_port, uri),
619                                };
620
621                                let response = format!(
622                                    "HTTP/1.1 301 Moved Permanently\r\nLocation: {}\r\nContent-Length: 0\r\nConnection: close\r\n\r\n",
623                                    location
624                                );
625                                let _ = stream.write_all(response.as_bytes()).await;
626                            });
627                        }
628                        Err(e) => eprintln!("HTTP redirect accept error: {}", e),
629                    }
630                }
631                _ = tokio::signal::ctrl_c() => {
632                    println!("\nShutting down HTTP redirect listener (SIGINT).");
633                    break;
634                }
635                _ = sigterm() => {
636                    println!("\nShutting down HTTP redirect listener (SIGTERM).");
637                    break;
638                }
639            }
640        }
641    }
642
643    async fn process_h1_tls(
644        mut stream: tokio_rustls::server::TlsStream<tokio::net::TcpStream>,
645        peer_addr: std::net::SocketAddr,
646        app: impl Application,
647    ) -> Result<(), String> {
648        use tokio::io::{AsyncReadExt, AsyncWriteExt};
649
650        let (server_ip, server_port, _) = get_ip_port_thread_count();
651        let request_allocation_size = get_request_allocation_size();
652
653        let mut buffer = vec![0u8; request_allocation_size as usize];
654        if let Err(e) = stream.read(&mut buffer).await {
655            let raw = Server::bad_request_response(e.to_string());
656            let _ = stream.write_all(&raw).await;
657            return Ok(());
658        }
659
660        let request = match Request::parse(&buffer) {
661            Ok(r) => r,
662            Err(message) => {
663                let raw = Server::bad_request_response(message);
664                let _ = stream.write_all(&raw).await;
665                return Ok(());
666            }
667        };
668
669        let connection = ConnectionInfo {
670            client: Address {
671                ip: peer_addr.ip().to_string(),
672                port: peer_addr.port() as i32,
673            },
674            server: Address {
675                ip: server_ip,
676                port: server_port,
677            },
678            request_size: request_allocation_size,
679        };
680
681        let mut response = match app.execute(&request, &connection) {
682            Ok(r) => r,
683            Err(message) => {
684                let raw = Server::bad_request_response(message);
685                let _ = stream.write_all(&raw).await;
686                return Ok(());
687            }
688        };
689
690        crate::metrics::record_request();
691        crate::compression::apply_gzip(&request, &mut response);
692        response.headers.push(Header::get_hsts_header());
693
694        #[cfg(feature = "http3")]
695        response.headers.push(Header {
696            name: Header::_ALT_SVC.to_string(),
697            value: format!("h3=\":{}\"", server_port),
698        });
699        #[cfg(not(feature = "http3"))]
700        response.headers.push(Header {
701            name: Header::_ALT_SVC.to_string(),
702            value: format!("h2=\":{}\"", server_port),
703        });
704
705        Log::log_access(&request, &response, &peer_addr);
706
707        let raw = Response::generate_response(response, request);
708        stream
709            .write_all(&raw)
710            .await
711            .map_err(|e| e.to_string())?;
712        stream.flush().await.map_err(|e| e.to_string())?;
713
714        Ok(())
715    }
716}
717
718#[cfg(feature = "http3")]
719impl Server {
720    pub async fn run_quic(
721        app: impl Application + New + Send + 'static + Copy,
722    ) {
723        use crate::tls::create_quinn_server_config;
724        use crate::h3_handler;
725
726        let cert_path = std::env::var(crate::entry_point::Config::RWS_CONFIG_TLS_CERT_FILE)
727            .unwrap_or_default();
728        let key_path = std::env::var(crate::entry_point::Config::RWS_CONFIG_TLS_KEY_FILE)
729            .unwrap_or_default();
730
731        if cert_path.is_empty() || key_path.is_empty() {
732            return;
733        }
734
735        let server_config = match create_quinn_server_config(&cert_path, &key_path) {
736            Ok(c) => c,
737            Err(e) => {
738                eprintln!("QUIC TLS setup failed: {}", e);
739                return;
740            }
741        };
742
743        let (server_ip, server_port, _) = get_ip_port_thread_count();
744        let bind_addr = format!("{}:{}", server_ip, server_port);
745        let addr: std::net::SocketAddr = match bind_addr.parse() {
746            Ok(a) => a,
747            Err(e) => {
748                eprintln!("Invalid QUIC bind address '{}': {}", bind_addr, e);
749                return;
750            }
751        };
752
753        let endpoint = match quinn::Endpoint::server(server_config, addr) {
754            Ok(e) => e,
755            Err(e) => {
756                eprintln!("QUIC endpoint error: {}", e);
757                return;
758            }
759        };
760
761        println!("Listening for QUIC/HTTP3 on UDP {}:{}", server_ip, server_port);
762
763        loop {
764            tokio::select! {
765                maybe = endpoint.accept() => {
766                    match maybe {
767                        Some(incoming) => {
768                            tokio::spawn(async move {
769                                match incoming.await {
770                                    Ok(conn) => {
771                                        let peer_addr = conn.remote_address();
772                                        if let Err(e) = h3_handler::handle_connection(conn, peer_addr, app).await {
773                                            eprintln!("H3 connection error: {}", e);
774                                        }
775                                    }
776                                    Err(e) => eprintln!("QUIC connection error: {}", e),
777                                }
778                            });
779                        }
780                        None => break,
781                    }
782                }
783                _ = tokio::signal::ctrl_c() => {
784                    crate::metrics::SERVER_READY.store(false, std::sync::atomic::Ordering::SeqCst);
785                    println!("\nShutting down QUIC (SIGINT).");
786                    endpoint.close(0u32.into(), b"shutdown");
787                    break;
788                }
789                _ = sigterm() => {
790                    crate::metrics::SERVER_READY.store(false, std::sync::atomic::Ordering::SeqCst);
791                    println!("\nShutting down QUIC (SIGTERM).");
792                    endpoint.close(0u32.into(), b"shutdown");
793                    break;
794                }
795            }
796        }
797    }
798}
799
800