Skip to main content

Crate vane_core

Crate vane_core 

Source
Expand description

Foundation types, traits, FlowGraph IR, and compilation pipeline for vane.

See spec/crates/core.md, spec/flow-model.md, spec/crates/engine.md.

Re-exports§

pub use compile::compile;
pub use config::Env;
pub use config::EnvReader;
pub use config::LoadedConfig;
pub use config::ProcessEnv;
pub use config::load;
pub use config::scan_rules_dir;
pub use preset::PresetInvocation;
pub use preset::RuleEntry;
pub use preset::expand_invocation;
pub use body::*;
pub use conn_context::*;
pub use error::*;
pub use fetch::*;
pub use flow_ctx::*;
pub use flow_log::*;
pub use ir::*;
pub use l4::*;
pub use metadata::*;
pub use middleware::*;
pub use wasm_runtime::*;
pub use predicate::*;

Modules§

body
compile
config
Config loading entry point.
conn_context
error
fetch
flow_ctx
flow_log
ir
l4
meta
metadata
middleware
phase
predicate
preset
Preset expansion: {"preset": ..., ...}Vec<RawRule>.
rule
version
wasm_runtime

Structs§

PeekResult
Outcome of one peek-buffer classification. buffer is the bytes that were classified (kept on the result so consumers can replay them to a downstream decoder via, e.g., peeked-stream). detected is None when at least one detector wants more bytes; the caller should read more and call [classify] again.
TlsClientHello

Enums§

DetectedProtocol

Constants§

MAX_PEEK_BYTES
Maximum number of bytes a peek prelude should accumulate before declaring the connection’s prefix Unknown. 8 KiB matches what most servers can read in a single non-blocking syscall and covers any realistic TLS ClientHello (with SNI + ALPN + GREASE).