Close stops forwarding traffic and close both ends of the Proxy.

returns the names of pre-generated key and certificate files.

Client returns a TLS configuration meant to be used by a client.

Run starts forwarding traffic back and forth between the front and back-end addresses.

tempSocketPath returns a temporary socket path short enough to avoid exceeding Unix-domain socket path length limits on some platforms.

NewUnixSocketWithOpts creates a Unix socket with the specified options. On Unix platforms, socket permissions are 0000 by default, i.e. no access for

ParsePortSpecs receives port specs in the format of ip:public:private/proto and parses these in to the internal types

Proto returns the protocol of a Port

Server returns a TLS configuration meant to be used by a server.

Port returns the port number of a Port

NewProxy creates a Proxy according to the specified frontendAddr and backendAddr.

parsePortRange parses and validates the specified string as a port range (e.g., "8000-9000").

Int returns the port number of a Port as an int. It assumes [Port] is valid, and returns 0 otherwise.

ParsePortSpec parses a port specification string into a slice of PortMappings

returns the name of a pre-generated, multiple-certificate CA file with both RSA and ECDSA certs.

Accept implements the Accept method in the Listener interface; it waits for the next call and returns a generic Conn. It returns a [net.ErrClosed] if

Dial establishes a connection with the in-memory listener. The network and addr parameters are accepted for compatibility with conventional dialer AP

SplitProtoPort splits a port(range) and protocol, formatted as "<portnum>/[<proto>]" "<startport-endport>/[<proto>]". It returns an empty string for b

defaultConfig is the default config used by both client and server TLS configuration.

parsePortNumber parses rawPort into an int, unwrapping strconv errors and returning a single "out of range" error for any value outside 0–65535.

NewUnixSocket creates a Unix socket with the specified path and group. On Unix platforms, the socket is owned by root:gid and has permissions 0660.

WithChmod modifies socket file's access mode. Abstract Unix sockets have no filesystem representation, so this option returns an error wrapping [erro

WithChown modifies the socket file's uid and gid. Abstract Unix sockets have no filesystem representation, so this option returns an error wrapping [

isAbstractSocket reports whether path is an abstract Unix socket address. Go recognizes two representations of abstract socket addresses: - On Linux

Addr returns the socket's addr string to satisfy net.Listener

DialContext establishes a connection with the in-memory listener. The network and addr parameters are accepted for compatibility with conventional di

FrontendAddr returns the address on which the proxy is listening.

Sort sorts a list of ports using the provided predicate This function should compare `i` and `j`, returning true if `i` is considered to be less than

SortPortMap sorts the list of ports and their respected mapping. The ports will explicit HostPort will be placed first.

WithAdditionalUsersAndGroups modifies the socket file's DACL to grant access to additional users and groups. It sets [BasePermissions] on the socket

WithBasePermissions sets a default DACL, which allows Administrators and LocalSystem full access (similar to defaults used in [moby]); - D:P: DACL wi

adjustMinVersion sets the MinVersion on `config`, the input configuration. It assumes the current MinVersion on the `config` is the lowest allowed.

certPool returns an X.509 certificate pool from `caFile`, the certificate file.

getSecurityDescriptor returns the DACL for the Unix socket. By default, it grants [BasePermissions]. Additional users and groups are granted generic

wellKnownAccountName returns the localized account name for a well-known SID. Windows defines many built-in users and groups by stable well-known SID

withSDDL applies the given SDDL to the socket. It returns an error when failing parse the SDDL, or if the DACL was defaulted. TODO(thaJeztah); this i

ClientDefault returns a secure-enough TLS configuration for the client TLS configuration.

Close closes the listener. It will be unavailable for use once closed.

NewInmemSocket creates an in-memory only [net.Listener]. The addr argument can be any string, but is used to satisfy the [net.Listener.Addr] part of t

NewPort creates a new instance of a Port given a protocol and port number or port range

NewTCPProxy creates a new TCPProxy.

NewUDPProxy creates a new UDPProxy.

ParsePort parses the port number string and returns an int

ParsePortRange parses and validates the specified string as a port range (e.g., "8000-9000").

ParsePortRangeToInt parses the port range string and returns start/end ints

ServerDefault returns a secure-enough TLS configuration for the server TLS configuration.

generates a multiple-certificate CA file with both RSA and ECDSA certs and returns the filename so that cleanup can be deferred.

getCert returns a Certificate from the CertFile and KeyFile in 'options', if the key is encrypted, the Passphrase in 'options' will be used to decrypt

returns the names of pre-generated, encrypted private key and corresponding certificate file

getPrivateKey returns the private key in 'keyBytes', in PEM-encoded format. It returns an error if the file could not be decoded or was protected by a

isValidMinVersion checks that the input value is a valid tls minimum version

BackendAddr returns the TCP proxied address.

BackendAddr returns the proxied address.

BackendAddr returns the backend address.

BackendAddr returns the proxied UDP address.

Close stops forwarding the traffic.

Close does nothing.

Close stops forwarding the traffic.

ConfigureTransport configures the specified [http.Transport] according to the specified proto and addr. If the proto is unix (using a unix socket to

FrontendAddr returns the TCP address on which the proxy is listening.

FrontendAddr returns the frontend address.

FrontendAddr returns the UDP address on which the proxy is listening.

Less sorts the port so that the order is: 1. port with larger specified bindings 2. larger port 3. port with tcp protocol

Network returns the addr string, satisfies net.Addr

NewStubProxy creates a new StubProxy

NewTCPSocket creates a TCP socket listener with the specified address and the specified tls configuration. If TLSConfig is set, will encapsulate the T

NewUnixSocket creates a new Unix socket. It sets [BasePermissions] on the socket path and grants the given additional users and groups to generic rea