Skip to content

feat: add HTTPS interception mode with kind acceptance automation#6

Merged
reoring merged 5 commits intomainfrom
feature/https-interception-mode
Feb 12, 2026
Merged

feat: add HTTPS interception mode with kind acceptance automation#6
reoring merged 5 commits intomainfrom
feature/https-interception-mode

Conversation

@reoring
Copy link
Owner

@reoring reoring commented Feb 11, 2026

Summary

  • Add transparent HTTPS interception mode for outbound 443 (dynamic leaf certs from a configured CA).
  • Enforce SNI/Host/port constraints and integrate allowlist + header rewrites.
  • Add metrics and kind E2E automation (tests/e2e/run-https-interception-test.sh).

Notes

  • Terminology is standardized: mitm -> https_interception (config/env vars/metrics/tests).

Testing

  • cargo test

Clarify terminology and update config keys, env vars, metrics, and E2E tests.
@reoring reoring changed the title Rename MITM mode to HTTPS interception feat: add HTTPS interception mode with kind acceptance automation Feb 11, 2026
Make IPv6 enforcement an explicit opt-in/out and fail fast when enabled but ip6tables or ip6table_nat is unavailable.

Update docs and test manifests to set BOTBOX_ENABLE_IPV6 explicitly, pin curl images, and improve HTTPS interception certificate metrics.
time 0.3.47 requires rustc 1.88; keep kind acceptance and Docker builds working.
Align CI and Docker builds on Rust 1.93.0, and declare the toolchain in rust-toolchain.toml and Cargo.toml.
@reoring reoring merged commit a934072 into main Feb 12, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant