WithOptions returns a new tee filter Spec, whose instances execute the exact same Request against a shadow backend with given options. Available optio

func stdlibProxy(backendURL string) (proxyURL string, closeServer func()) { parsed, err := url.Parse(backendURL) if err != nil { panic(err) } p

Prevent different opa instances from triggering plugins (f.ex. downloading new bundles) at the same time

correctedInitialAge computes the corrected_initial_age per RFC 9111 §4.2.3. It is called once at cache-entry-creation time and stored in Entry.Correct

type testListener struct { addr net.Addr } func (l *testListener) Accept() (net.Conn, error) { } func (l *testListener) Addr() net.Addr { if l.addr

parse a routing document with a single route

Makes a request to an available etcd endpoint, with retries in case of failure, and converts the http response to a parsed etcd response object.

filterRegistry creates a filter registry with the builtin and custom filter specs registered excluding disabled filters. If [Options.RegisterFilters]

second argument must be the ('sub') command.

headBodyOmitted returns rsp with an empty body when method is HEAD. RFC 9110 §9.3.2: HEAD responses must not include a message body.

makeMTLSRegistry returns a filter registry that includes the mtlsCN filter.

matches a set of request headers to a fix and regexp header condition

matches a request to a set of leaf matchers

matches a path in the path trie structure.

mtlsGenCert generates an ECDSA P-256 certificate. When signerCert/signerKey are nil the cert is self-signed and marked as a CA.

newCABundle generates a self-signed ECDSA CA cert and returns a caBundle.

returns etcd type medium if any of '-etcd-urls' or '-etcd-prefix' are defined.