ConnStrictWhiteListPolicy returns a ConnPolicyFunc which decides whether the upstream ip is allowed to send a proxy header based on a list of allowed

Experiment is true if the type is reserved for temporary experimental use by application developers, see section 2.2.7.

FindSSL returns the first PP2SSL if it exists and is well formed.

Future is true is the type is reserved for future use, see section 2.2.7.

JoinTLVs joins multiple Type-Length-Value records.

Ports returns source/destination ports for TCP/UDP headers.

ReadTimeout acts as Read but takes a timeout. If that timeout is reached, it's assumed there's no proxy protocol header. Deprecated: ReadTimeout cann

SSLCipher returns the US-ASCII string representation of the used TLS cipher and whether that extension exists.

ServeConn enqueues a new connection. The connection will be returned in the next Accept call.

SetDeadline wraps original conn.SetDeadline.

SetReadDeadline is a no-op so header processing (which now applies the default read-header timeout) does not dereference the nil embedded net.Conn.

SetWriteDeadline wraps original conn.SetWriteDeadline.

UnixAddrs returns UNIX source/destination addresses if the header is UNIX-based.

WithPolicy adds given policy to a connection when passed as option to NewConn().

exampleSelfSignedConfig returns a *tls.Config with a throwaway self-signed certificate, so the example is self-contained. Real servers load a real cer

isASCII checks whether a byte slice has all characters that fit in the ascii character set, including the null byte.

newContextAssertingServer returns an http.Server that asserts connContextKey and baseContextKey are present in every request's context.

EqualTo returns true if headers are equivalent, false otherwise. Deprecated: use EqualsTo instead. This method will eventually be removed.

ExtractPSCConnectionID returns the first PSC Connection ID in the TLV if it exists and is well-formed and a bool indicating one was found.

FindAzurePrivateEndpointLinkID returns the first Azure Private Endpoint LinkID if it exists in the TLV collection and a boolean indicating if it was f

HeaderProxyFromAddrs creates a new PROXY header from a source and a destination address. If version is zero, the latest protocol version is used. The

ReadFrom implements the io.ReaderFrom ReadFrom method.

SkipProxyHeaderForCIDR returns a PolicyFunc which can be used to accept a connection from a skipHeaderCIDR without requiring a PROXY header, e.g. Kube

Spec is true if the type is covered by the spec, see section 2.2 and 2.2.7.

SplitTLVs splits the Type-Length-Value vector, returns the vector or an error.

TCPConn returns the underlying TCP connection, allowing access to specialized functions. Use this ONLY if you know exactly what you are doing.

UDPConn returns the underlying UDP connection, allowing access to specialized functions. Use this ONLY if you know exactly what you are doing.

UnixConn returns the underlying Unix socket connection, allowing access to specialized functions. Use this ONLY if you know exactly what you are doin

ValidateHeader adds given validator for proxy headers to a connection when passed as option to NewConn().

Verified is true if the client presented a certificate and it was successfully verified.

AzurePrivateEndpointLinkID returns linkID if given TLV matches Azure Private Endpoint LinkID format Format description: Field Length (Octets) Descr

IsAzurePrivateEndpointLinkID returns true if given TLV matches Azure Private Endpoint LinkID format.

pscConnectionID returns the ID of a GCP PSC extension TLV or errors with ErrIncompatibleTLV or ErrMalformedTLV if it's the wrong TLV type or is malfor

readHeader reads the proxy protocol header from the connection.

selfSignedConfig returns a *tls.Config with a throwaway self-signed certificate so the example runs without external files. Real servers load a real c

ExampleListener_tls shows how to combine the PROXY protocol with TLS. The only real decision is the listener wrapping order, and it depends on where

ExampleListener_tlsHeaderInsideTLS shows the second wrapping order, where the upstream completes the TLS handshake first and only then sends the PROXY

ExampleReadHeaderTimeout demonstrates the cancellable, low-level way to read a PROXY protocol header directly from a net.Conn you manage yourself. Unl

IsUnspec returns true if the command is unspecified, false otherwise.