Package-level declarations

Types

object AcceptAllServerCertificatesTrustManagerFactory : SimpleTrustManagerFactory

Permissive trust manager used for TOFU backend mode.

Link copied to clipboard
class BackendAvailabilityTracker(knownBackendIds: Set<String> = emptySet(), unavailableCooldownMillis: Long, onlineHeartbeatTimeoutMillis: Long, nowMillis: () -> Long = System::currentTimeMillis)

Tracks short-lived backend outages to avoid repeated long connection hangs.

Link copied to clipboard

Runtime certificate policy for outbound proxy->backend QUIC links.

object ClientCertificateCaptureTrustManagerFactory : SimpleTrustManagerFactory

Trust manager for inbound client certificate capture on proxy listener.

Link copied to clipboard
class PinnedCertificateTrustManagerFactory : SimpleTrustManagerFactory

Trust manager factory that accepts only a certificate with the configured SHA-256 fingerprint.

Link copied to clipboard
class ProxyListener(config: ProxyConfig, router: Router, sessionManager: SessionManager, tokenService: TokenService, transferTokenValidator: TransferTokenValidator, rateLimitService: RateLimitService, playerManager: PlayerManagerImpl, eventBus: EventBus, transferService: PlayerTransferService, certificatePolicyStore: BackendCertificatePolicyStore, backendAvailabilityTracker: BackendAvailabilityTracker, metrics: ProxyMetricsRegistry? = null) : AutoCloseable

QUIC listener that accepts client sessions and wires stream handling.

Link copied to clipboard

Security-critical QUIC transport policy shared across inbound/outbound paths.

Link copied to clipboard
class QuicSessionHandler(router: Router, sessionManager: SessionManager, tokenService: TokenService, transferTokenValidator: TransferTokenValidator, rateLimitService: RateLimitService, certs: CertificateUtil.CertPair, playerManager: PlayerManagerImpl, eventBus: EventBus, transferService: PlayerTransferService, certificatePolicyStore: BackendCertificatePolicyStore, backendAvailabilityTracker: BackendAvailabilityTracker, defaultBackendId: String, backendIds: List<String>, referralConfig: ReferralConfig, protocolLimits: ProtocolLimitsConfig, metrics: ProxyMetricsRegistry? = null) : ChannelInboundHandlerAdapter

Handles a single QUIC session, intercepting the connect handshake and bridging streams.

Link copied to clipboard

QUIC baseline profile aligned with current kernel networking limits.