Struct ProxyBuilder 

pub struct ProxyBuilder<'a> { /* private fields */ }

Stable builder for embedding the proxy with custom extension points. Obtain it via Proxy::builder. Every seam defaults to the built-in behaviour, so a builder with no overrides is identical to Proxy::bind. The enterprise plugs a distributed rate-limit store or premium modules here without forking (BOUNDARY §4).

Implementations

impl<'a> ProxyBuilder<'a>

pub fn modules(self, modules: Vec<Box<dyn WafModule>>) -> Self

Replace the extra detection modules appended after the built-in set. These run after the built-ins and are NOT carried across a config reload.

pub fn add_module(self, module: Box<dyn WafModule>) -> Self

Append a single extra detection module (additive over Self::modules).

pub fn state_store(self, store: Arc<dyn StateStore>) -> Self

Inject the rate-limit StateStore (e.g. a distributed Redis store). The store survives config reloads. Defaults to the in-memory token bucket sized from [rate_limit].max_tracked_keys.

pub fn cert_source(self, source: Arc<dyn TlsCertSource>) -> Self

Inject the TlsCertSource (e.g. enterprise ACME/managed-PKI/mTLS). [tls].enabled and [tls].alpn still come from config; the source only governs cert provenance, so the config cert_path/key_path are ignored when one is injected. Defaults to the OPEN FileCertSource reading those paths.

pub async fn build(self) -> Result<Proxy, Box<dyn Error + Send + Sync>>

Bind the listener and construct the proxy with the chosen seams.