ginuerzh dd19e4387a feat(tls): add rejectUnknownSNI support for TLS listeners ...

Adds RejectUnknownSNI and ServerNames fields to TLSConfig. When enabled,
TLS handshakes with missing or non-allowlisted SNI are rejected at the
handshake level via GetConfigForClient before any certificate is sent.

Works across all TLS-based listener types (tls, mtls, ws, mws, http2,
grpc, http3) since they share the same *tls.Config from LoadServerConfig.

2026-05-31 22:11:29 +08:00

..

admission

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

auth

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

bypass

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

chain

docs(parsing): add package and symbol doc comments

2026-05-24 13:58:37 +08:00

hop

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

hosts

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

ingress

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

limiter

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

logger

docs(parsing): add package and symbol doc comments

2026-05-24 13:58:37 +08:00

node

feat(forwarder/sniffer): add HTTP request body rewriting, deprecate rewriteBody in favor of rewriteResponseBody

2026-05-31 19:46:41 +08:00

observer

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

parser

docs(parsing): add package and symbol doc comments

2026-05-24 13:58:37 +08:00

recorder

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

resolver

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

router

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

sd

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

selector

docs(parsing): add package and symbol doc comments

2026-05-24 13:58:37 +08:00

service

feat(tls): add rejectUnknownSNI support for TLS listeners

2026-05-31 22:11:29 +08:00

parse.go

docs(parsing): add package and symbol doc comments

2026-05-24 13:58:37 +08:00

tls_test.go

test(parsing): add 229 unit tests across 18 config/parsing packages

2026-05-24 13:34:33 +08:00

tls.go

docs(parsing): add package and symbol doc comments

2026-05-24 13:58:37 +08:00