Struct ReverseProxyService 

pub struct ReverseProxyService { /* private fields */ }

The reverse proxy service

Implementations

impl ReverseProxyService

pub fn new( registry: Arc<ServiceRegistry>, load_balancer: Arc<LoadBalancer>, config: Arc<ProxyConfig>, ) -> Self

Create a new reverse proxy service

pub fn with_remote_addr(self, addr: SocketAddr) -> Self

Set the remote client address for this request

pub fn with_tls(self, is_tls: bool) -> Self

Mark this connection as being over TLS

pub fn with_trusted_proxies(self, trusted: Arc<TrustedProxyList>) -> Self

Override the trusted-proxy list (default: localhost_only).

Peers in this list are believed when they set CF-Connecting-IP or X-Forwarded-For headers identifying the real client IP.

pub fn with_cert_manager(self, cm: Arc<CertManager>) -> Self

Set the certificate manager for ACME challenge interception

pub fn with_network_policy_checker(self, checker: NetworkPolicyChecker) -> Self

Set the network policy checker for access control enforcement

pub fn is_tls(&self) -> bool

Check if this connection is over TLS

pub async fn proxy_request( &self, req: Request<Incoming>, ) -> Result<Response<BoxBody>>

Handle an incoming HTTP request

Errors

Returns an error if route resolution fails, no healthy backends are available, or the backend request fails.

Panics

Panics if building a well-formed HTTP response for an ACME challenge or upgrade reply fails (indicates a bug, not a runtime condition).

pub fn error_response(error: &ProxyError) -> Response<BoxBody>

Build a client-facing error response with a generic body.

This is the default-deny safety boundary for the ingress proxy. The proxy binds 0.0.0.0:80/:443, so it MUST NOT leak internal details (the requested Host/path, a backend address, or the internal load-balancer group name) to an unauthenticated caller. The full, detailed ProxyError is logged by the caller (error!(error = %e) in server.rs); the body returned here carries only a minimal, status-appropriate phrase so an unmatched / no-target request gets a clean deny rather than an internal echo.

Panics

Panics if building a valid HTTP response with a plain-text body fails, which should never occur with well-formed status codes.

Trait Implementations

impl Clone for ReverseProxyService

fn clone(&self) -> ReverseProxyService

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Service<Request<Incoming>> for ReverseProxyService

type Response = Response<BoxBody<Bytes, Error>>

Responses given by the service.

type Error = ProxyError

Errors produced by the service.

type Future = Pin<Box<dyn Future<Output = Result<<ReverseProxyService as Service<Request<Incoming>>>::Response, <ReverseProxyService as Service<Request<Incoming>>>::Error>> + Send>>

The future response value.

fn poll_ready(&mut self, _cx: &mut Context<'_>) -> Poll<Result<(), Self::Error>>

Returns Poll::Ready(Ok(())) when the service is able to process requests.

fn call(&mut self, req: Request<Incoming>) -> Self::Future

Process the request and return the response asynchronously.