Expand description
§Production HTTPS transport
The server-binding half of the transport stack. Wraps
[hashiverse_lib::transport::partial_https_transport::PartialHttpsTransportFactory]
(which supplies the client-side outbound rpc() and the bootstrap lookup) and
adds everything needed to accept inbound TLS connections:
- a
TcpListeneracquired lazily so the factory can live insideArcbefore the port is actually bound, - a rustls
TlsAcceptordriven bycrate::transport::https_transport_cert_refresher::HttpsTransportCertRefresherso certificates roll over without downtime, - a
Semaphorecapping concurrent connections at [hashiverse_lib::tools::config::HTTPS_SERVER_TRANSPORT_MAX_CONNECTIONS] so a connection-exhaustion attack can’t starve the OS of file descriptors, - handshake / header-read / body-read timeouts for Slow Loris defence (values
in [
hashiverse_lib::tools::config]).
Per-connection state flows through
[hashiverse_lib::transport::ddos::ddos::DdosConnectionGuard]s so per-IP
accounting happens automatically without each handler needing to remember it.
Structs§
- Full
Https Transport Factory - Full HTTPS transport factory for server use.
- Full
Https Transport Server