Module outbound 

Shared outbound HTTP client for plugin callouts and upstream proxying.

One pooled hyper client pair lives in PluginResources for the process lifetime: plugins (forward-auth, opa, loggers, upstream, …) reuse its connection pool instead of constructing a client per node or per request. Supports http and https (rustls, native roots); ssl_verify: false selects a lazily-built client with certificate verification disabled.

Modules

tls

Per-upstream TLS identities — mTLS to upstream backends.

Structs

NoVerification 🔒

Certificate verifier that accepts everything — only reachable via an explicit ssl_verify: false in plugin config.

OutboundClient

Process-wide pooled HTTP client.

OutboundRequest

A single outbound request. timeout covers the whole call: connect, request write, and response body collection.

OutboundResponse

A fully-buffered outbound response.

Enums

OutboundError

Outbound call failure, distinguishing timeouts from transport errors so callers can map them to distinct gateway error codes.

Functions

build_insecure_client 🔒

client_tls_connector

Builds a client TLS connector for a raw upstream WebSocket (wss) handshake.

Type Aliases

PooledClient 🔒