Close wraps original conn.Close.

closeOnCleanup registers c.Close() as a t.Cleanup, failing the test on error.

Accept waits for and returns the next valid connection to the listener.

Addr returns the underlying listener's network address.

Write wraps original conn.Write.

newLocalListener binds a TCP listener on a random localhost port.

Read is check for the proxy protocol header when doing the initial scan. If there is an error parsing the header, it is returned and the socket is clo

expectClientOK drains the client result channel and fails on a non-nil error.

NewConn is used to wrap a net.Conn that may be speaking the PROXY protocol into a proxyproto.Conn. By default the returned Conn applies DefaultReadHe

runClient launches the standard client goroutine and returns a channel that is closed on success or receives the first error.

EqualsTo returns true if headers are equivalent, false otherwise.

Read identifies the proxy protocol version and reads the remaining of the header, accordingly. If proxy protocol header signature is not present, the

WriteTo renders a proxy protocol header in a format and writes it to an io.Writer.

testTCPv4Header returns the canonical PROXY TCPv4 header shared across tests.

WriteTo implements io.WriterTo.

Close closes the underlying listener.

RemoteAddr returns the address of the client if the proxy protocol is being used, otherwise just returns the address of the socket peer. In case an er

IsDatagram returns true if the transport protocol is UDP or DGRAM (SOCK_DGRAM), false otherwise.

IsStream returns true if the transport protocol is TCP or STREAM (SOCK_STREAM), false otherwise.

IsUnix returns true if the address family is UNIX (AF_UNIX), false otherwise.

ProxyHeader returns the proxy protocol header, if any. If an error occurs while reading the proxy header, nil is returned.

SetReadDeadline wraps original conn.SetReadDeadline.

AWSVPCEndpointID returns the AWS VPC endpoint ID if present.

IsIPv4 returns true if the address family is IPv4 (AF_INET4), false otherwise.

IsIPv6 returns true if the address family is IPv6 (AF_INET6), false otherwise.

Serve accepts incoming connections on the listener ln.

ensureHeaderProcessed runs header processing once.

FindAWSVPCEndpointID returns the first AWS VPC ID in the TLV if it exists and is well-formed.

IsLocal returns true if the command in v2 is LOCAL or the transport in v1 is UNKNOWN, i.e. when no address information is expected, false otherwise.

IsUnspec returns true if the transport protocol or address family is unspecified, false otherwise.

MustLaxWhiteListPolicy returns a LaxWhiteListPolicy but will panic if one of the provided IP addresses or IP ranges is invalid. Deprecated: use ConnM

MustStrictWhiteListPolicy returns a StrictWhiteListPolicy but will panic if one of the provided IP addresses or IP ranges is invalid. Deprecated: use

ReadHeaderTimeout reads the PROXY protocol header from conn, giving up after timeout. It is the cancellable replacement for the deprecated ReadTimeout

LocalAddr returns the address of the server if the proxy protocol is being used, otherwise just returns the address of the socket server. In case an e

SSL returns the pp2_tlv_ssl from section 2.2.5 or errors with ErrIncompatibleTLV or ErrMalformedTLV.

SetTLVs sets the TLVs stored in this header. This method replaces any previous TLV.

Format renders a proxy protocol header in a format to write over the wire.

IsAWSVPCEndpointID reports whether tlv contains an AWS VPC endpoint ID.

IsProxy returns true if the command in v2 is PROXY or the transport in v1 is not UNKNOWN, i.e. when valid local/remote address and port information is

NewServer creates a new HTTP server. A nil h2 is equivalent to a zero http2.Server.

Registered is true if the type is registered in the spec, see section 2.2.

TLVs returns the TLVs stored into this header, if they exist. TLVs are optional for v2 of the protocol.

TrustProxyHeaderFrom returns a ConnPolicyFunc which can be used to decide whether to use or reject PROXY headers based on the source IP of the connect

addTLVLen adds the length of the TLV to the header length or errors on uint16 overflow.

ClientSSL indicates that the client connected over SSL/TLS. When true, SSLVersion will return the version.

ConnMustLaxWhiteListPolicy returns a ConnLaxWhiteListPolicy but will panic if one of the provided IP addresses or IP ranges is invalid.

ConnMustStrictWhiteListPolicy returns a ConnStrictWhiteListPolicy but will panic if one of the provided IP addresses or IP ranges is invalid.

ConnSkipProxyHeaderForCIDR returns a ConnPolicyFunc which can be used to accept a connection from a skipHeaderCIDR without requiring a PROXY header, e

IPs returns source/destination IPs for TCP/UDP headers.

IgnoreProxyHeaderNotOnInterface returns a ConnPolicyFunc which can be used to decide whether to use or ignore PROXY headers depending on the connectio

IsSSL reports whether the TLV is of SSL type.

LaxWhiteListPolicy returns a PolicyFunc which decides whether the upstream ip is allowed to send a proxy header based on a list of allowed IP addresse

Marshal formats the PP2SSL structure as a TLV.

based on net/http/httptest/Server.StartTLS.

Raw returns the underlying connection which can be casted to a concrete type, allowing access to specialized functions. Use this ONLY if you know exa

SSLVersion returns the US-ASCII string representation of the TLS version and whether that extension exists.

SetReadHeaderTimeout sets the readHeaderTimeout for a connection when passed as option to NewConn(). A value of 0 disables the header read timeout; ne

StrictWhiteListPolicy returns a PolicyFunc which decides whether the upstream ip is allowed to send a proxy header based on a list of allowed IP addre

TCPAddrs returns TCP source/destination addresses if the header is stream-based.

UDPAddrs returns UDP source/destination addresses if the header is datagram-based.

WithBufferSize sets the size of the read buffer used for proxy header detection. Values <= 0 are ignored and the default (256 bytes) is used. Values <

startTestServer listens on a random port, wraps the listener with wrapListener (or a proxyproto.Listener if nil), and starts an h2proxy.Server in the

App is true if the type is reserved for application specific data, see section 2.2.7.

ClientCN returns the string representation (in UTF8) of the Common Name field (OID: 2.5.4.3) of the client certificate's Distinguished Name and whethe

ClientCert returns the raw X.509 client certificate encoded in ASN.1 DER and whether that extension exists.

ClientCertConn indicates that the client provided a certificate over the current connection.

ClientCertSess indicates that the client provided a certificate at least once over the TLS session this connection belongs to.

ConnLaxWhiteListPolicy returns a ConnPolicyFunc which decides whether the upstream ip is allowed to send a proxy header based on a list of allowed IP