Expand description
§Production HTTPS transport
The server-binding half of the transport stack. Wraps
hashiverse_lib::transport::partial_https_transport::PartialHttpsTransportFactory
(which supplies the client-side outbound rpc() and the bootstrap lookup) and
adds everything needed to accept inbound TLS connections:
- a
TcpListeneracquired lazily so the factory can live insideArcbefore the port is actually bound, - a rustls
TlsAcceptordriven bycrate::transport::https_transport_cert_refresher::HttpsTransportCertRefresherso certificates roll over without downtime, - a
Semaphorecapping concurrent connections athashiverse_lib::tools::config::HTTPS_SERVER_TRANSPORT_MAX_CONNECTIONSso a connection-exhaustion attack can’t starve the OS of file descriptors, - handshake / header-read / body-read timeouts for Slow Loris defence (values
in
hashiverse_lib::tools::config).
Per-connection state flows through
hashiverse_lib::transport::ddos::ddos::DdosConnectionGuards so per-IP
accounting happens automatically without each handler needing to remember it.
Structs§
- Full
Https Transport Factory - Full HTTPS transport factory for server use.
- Full
Https Transport Server