Struct Server

enterprise/aibridgeproxyd/aibridgeproxyd.go:122–150

Server is the AI MITM (Man-in-the-Middle) proxy server. It is responsible for: - intercepting HTTPS requests to AI providers - decrypting requests using the configured MITM CA certificate - forwarding requests to aibridged for processing

//   - decrypting requests using the configured MITM CA certificate
//   - forwarding requests to aibridged for processing
type Server struct {
	ctx            context.Context
	logger         slog.Logger
	proxy          *goproxy.ProxyHttpServer
	httpServer     *http.Server
	listener       net.Listener
	tlsEnabled     bool
	coderAccessURL *url.URL
	// coderAccessPort is the resolved port for the Coder access URL.
	coderAccessPort string
	// refreshProviders fetches the live provider snapshot on Reload.
	// Nil disables hot-reload.
	refreshProviders RefreshProvidersFunc
	// providerRouter holds the live (mitmHosts, nameByHost) pair.
	providerRouter atomic.Pointer[providerRouter]
	// allowedPorts is the port allowlist for CONNECT requests. Fixed at
	// construction; not reloadable.
	allowedPorts []string
	// caCert is the PEM-encoded MITM CA certificate loaded during initialization.
	// This is served to clients who need to trust the proxy's generated certificates.
	caCert []byte
	// allowedPrivateRanges are CIDR ranges exempt from the blocked IP denylist.
	allowedPrivateRanges []net.IPNet
	// newDumper creates a RoundTripDumper for a given provider and request
	// ID. Nil when dumping is disabled.
	newDumper func(provider, requestID string) RoundTripDumper
	// Metrics is the Prometheus metrics for the proxy. If nil, metrics are disabled.
	metrics *Metrics
}

// providerRouter keeps CONNECT matching and provider lookup in sync.
type providerRouter struct {