Method SetCBShim

pkg/agent/proxy/proxy.go:293–302

SetCBShim wires the eBPF channel-binding shim handle into the proxy. Typically called by the agent that owns the cbshim lifecycle, once per proxy instance, before StartProxy. Pass nil to disable. Also installs the tls.MITMPublishHook so CertForClient publishes the MITM half of every connection's cb

(c cbshim.CBShim)

// MITM half of every connection's cbshim rendezvous. Cleared (back to
// nil) when called with a nil cbshim.
func (p *Proxy) SetCBShim(c cbshim.CBShim) {
	p.cbshim = c
	if c == nil {
		pTls.SetMITMPublishHook(nil)
		return
	}
	pTls.SetMITMPublishHook(func(connID string, mitmDER []byte) {
		c.RegisterMITM(connID, mitmDER)
	})
}

// SetSkipListener disables the TCP accept loop.
func (p *Proxy) SetSkipListener(skip bool) {