A CONNECT handler for an HttpxServer started with tunnels: true: dial
the destination named in authority-form, and if that works, answer 200 with a tunnel and pipe the
two together. Every failure is an ordinary status with no tunnel: 400 for
a malformed authority, 403 for destination policy, 502 for refused, reset
or unresolvable, 504 for a connect that timed out.
The destination policy is the one createForwardProxyHandler takes, applied
the same way: port and IP literal checked up front, names checked by the
socket's own lookup, so the address checked is the address dialled.
A CONNECT handler for an
HttpxServerstarted withtunnels: true: dial the destination named in authority-form, and if that works, answer 200 with a tunnel and pipe the two together. Every failure is an ordinary status with no tunnel: 400 for a malformed authority, 403 for destination policy, 502 for refused, reset or unresolvable, 504 for a connect that timed out.The destination policy is the one
createForwardProxyHandlertakes, applied the same way: port and IP literal checked up front, names checked by the socket's own lookup, so the address checked is the address dialled.