Struct TlsConfig 

#[non_exhaustive]
pub struct TlsConfig {
    pub enabled: bool,
    pub cert_path: String,
    pub key_path: String,
    pub alpn: Vec<String>,
}

Inbound TLS termination configuration. Basic termination, cert from file is the OPEN core surface (BOUNDARY.md §3.2): single-node self-sufficiency. ACME/rotation/ multi-node certs / mTLS-with-managed-PKI are ENTERPRISE and plug in behind the TlsCertSource seam (see waf-proxy::tls).

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

enabled: bool

Default OFF: the listener serves cleartext (h1 + h2c). When on, the listener serves ONLY TLS — there is no cleartext fallback on the same port (a required TLS that fails to build is a fatal boot error, never a silent downgrade).

cert_path: String

PEM file with the server certificate chain (leaf first).

key_path: String

PEM file with the private key (PKCS#8 / PKCS#1 / SEC1).

alpn: Vec<String>

ALPN protocols advertised, in preference order. Default ["h2","http/1.1"] so an h2-capable client (e.g. gRPC-over-TLS, Phase 13) negotiates HTTP/2 while an h1-only client falls back cleanly.

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> TlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TlsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TlsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.