API Reference masque v#0.7.0

Public API for the masque library.

Application callback module for the masque library.

MASQUE capsule registry.

MASQUE handler that chains to an upstream proxy.

Client-side MASQUE CONNECT-UDP session.

Encode/decode the three Compression Context capsules used by Connect-UDP-Bind (draft-ietf-masque-connect-udp-listen-11 sections 3.1 - 3.3)

Per-session Connect-UDP-Bind compression table.

RFC 9298 section 5 - inner framing for HTTP Datagrams.

RFC 9298 error to HTTP status code mapping.

Client-side MASQUE CONNECT-UDP session over HTTP/1.1.

MASQUE CONNECT-UDP listener over HTTP/1.1.

Per-tunnel server session for HTTP/1.1 MASQUE (CONNECT-UDP).

Supervisor for HTTP/1.1 MASQUE server sessions.

Client-side MASQUE CONNECT-UDP session over HTTP/2.

MASQUE CONNECT-UDP listener over HTTP/2.

Per-tunnel server session for HTTP/2 MASQUE.

Supervisor for HTTP/2 MASQUE server sessions.

Server-side handler behaviour for MASQUE tunnels.

ICMPv4 (RFC 792) and ICMPv6 (RFC 4443) error-message builders used by CONNECT-IP proxies to synthesise errors for packets they cannot deliver.

IP address classification for SSRF protection.

RFC 9484 §5 — CONNECT-IP capsule codec.

Client-side CONNECT-IP session (RFC 9484).

Client-side CONNECT-IP session (RFC 9484) over HTTP/1.1.

Per-tunnel server session for CONNECT-IP (RFC 9484) over HTTP/1.1.

Lightweight read-only IP packet parsing for CONNECT-IP scope checks (RFC 9484 section 5).

Default CONNECT-IP proxy handler (RFC 9484).

Per-tunnel server session for CONNECT-IP (RFC 9484).

Cross-session address registry for CONNECT-IP.

Metrics instrumentation for masque tunnels.

Transport race for MASQUE client connects.

MASQUE CONNECT-UDP proxy listener.

Per-H3-connection owner + router for MASQUE tunnels.

Per-tunnel server-side session.

Top-level supervisor for the masque application.

Client-side MASQUE CONNECT-TCP session.

Client-side MASQUE CONNECT-TCP session over HTTP/1.1.

Per-tunnel server session for classic CONNECT-TCP over HTTP/1.1 (RFC 9110 §9.3.6).

Built-in MASQUE handler that bridges a CONNECT-TCP tunnel to a real TCP connection on the server.

Per-tunnel server session for CONNECT-TCP.

Safe TLS client options for MASQUE's HTTP/1.1 rung.

Connect-UDP-Bind client session for h2 / h3 (draft-ietf-masque-connect-udp-listen-11). Sibling of masque_client_session / masque_ip_client_session; one module serves both transports by dispatching on a transport field.

Connect-UDP-Bind client session over HTTP/1.1 (draft-ietf-masque-connect-udp-listen-11). Sibling of masque_udp_bind_client_session for the h2/h3 paths.

Per-tunnel server session for Connect-UDP-Bind (draft-ietf-masque-connect-udp-listen-11) over HTTP/1.1.

Encode/decode the inner Bound UDP Proxying Payload, the bytes that follow the HTTP Datagram Context ID. Per draft-ietf-masque-connect-udp-listen-11 sections 4 (uncompressed) and 5 (compressed)

Default Connect-UDP-Bind handler. Owns the per-session upstream gen_udp socket, computes the Proxy-Public-Address list for the response, gates inbound packets via peer_filter_fun, and emits actions for the bind session to put on the wire.

Per-tunnel server session for Connect-UDP-Bind (draft-ietf-masque-connect-udp-listen-11). Sibling of masque_server_session / masque_h2_server_session; one module serves both h2 and h3 by dispatching on a transport field, the same shape used by masque_ip_server_session.

Built-in MASQUE handler that bridges a CONNECT-UDP tunnel to a real UDP flow on the server.

Per-connection owner for a pooled upstream transport conn.

Registry for pooled upstream MASQUE connections.

URI template handling for RFC 9298 CONNECT-UDP and the CONNECT-TCP draft.

URI template handling for RFC 9484 CONNECT-IP.

Generic URI-template engine used by MASQUE protocol facades (UDP, TCP, IP). Implements the subset of RFC 6570 that RFC 9298 and RFC 9484 require: literal segments, Level-1 name path placeholders, and the Level-3 form operator for query strings.

Connect-UDP-Bind URI and header helpers.