Skip to content

Conversation

ABin-Huang
Copy link

@ABin-Huang ABin-Huang commented Sep 12, 2025

CIDR Rule Storage Logic:

A dedicated netMaskSet storage mechanism is introduced to store the parsed CIDR network segment rules for
internal proxies and trusted proxies, providing data support for subsequent IP verification.

Proxy IP Verification Logic:

When verifying an internal proxy IP, it first checks whether the IP conforms to the original regular expression format. If not, it
further verifies whether the IP falls within the stored CIDR network segments of internal proxies.
When verifying a trusted proxy IP, it also first checks whether the IP matches the original regular expression format. If not, it
further confirms whether the IP is within the stored CIDR network segments of trusted proxies.

@markt-asf
Copy link
Contributor

Looks good. I'm just making a few changes locally:

  • fixing a few formatting nits
  • mirroring the changes to the Valve
  • adding the new attributes to the docs

This is mostly done. I should be in a position to commit by Monday.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants