Struct trust_dns_proto::rr::rdata::svcb::Alpn

source ·
#[repr(transparent)]
pub struct Alpn(pub Vec<String>);
Expand description

draft-ietf-dnsop-svcb-https-03 SVCB and HTTPS RRs for DNS, February 2021

6.1.  "alpn" and "no-default-alpn"

  The "alpn" and "no-default-alpn" SvcParamKeys together indicate the
  set of Application Layer Protocol Negotiation (ALPN) protocol
  identifiers [ALPN] and associated transport protocols supported by
  this service endpoint.

  As with Alt-Svc [AltSvc], the ALPN protocol identifier is used to
  identify the application protocol and associated suite of protocols
  supported by the endpoint (the "protocol suite").  Clients filter the
  set of ALPN identifiers to match the protocol suites they support,
  and this informs the underlying transport protocol used (such as
  QUIC-over-UDP or TLS-over-TCP).

  ALPNs are identified by their registered "Identification Sequence"
  ("alpn-id"), which is a sequence of 1-255 octets.

  alpn-id = 1*255OCTET

  The presentation "value" SHALL be a comma-separated list
  (Appendix A.1) of one or more "alpn-id"s.

  The wire format value for "alpn" consists of at least one "alpn-id"
  prefixed by its length as a single octet, and these length-value
  pairs are concatenated to form the SvcParamValue.  These pairs MUST
  exactly fill the SvcParamValue; otherwise, the SvcParamValue is
  malformed.

  For "no-default-alpn", the presentation and wire format values MUST
  be empty.  When "no-default-alpn" is specified in an RR, "alpn" must
  also be specified in order for the RR to be "self-consistent"
  (Section 2.4.3).

  Each scheme that uses this SvcParamKey defines a "default set" of
  supported ALPNs, which SHOULD NOT be empty.  To determine the set of
  protocol suites supported by an endpoint (the "SVCB ALPN set"), the
  client adds the default set to the list of "alpn-id"s unless the "no-
  default-alpn" SvcParamKey is present.  The presence of an ALPN
  protocol in the SVCB ALPN set indicates that this service endpoint,
  described by TargetName and the other parameters (e.g. "port") offers
  service with the protocol suite associated with this ALPN protocol.

  ALPN protocol names that do not uniquely identify a protocol suite
  (e.g. an Identification Sequence that can be used with both TLS and
  DTLS) are not compatible with this SvcParamKey and MUST NOT be
  included in the SVCB ALPN set.

  To establish a connection to the endpoint, clients MUST

  1.  Let SVCB-ALPN-Intersection be the set of protocols in the SVCB
      ALPN set that the client supports.

  2.  Let Intersection-Transports be the set of transports (e.g.  TLS,
      DTLS, QUIC) implied by the protocols in SVCB-ALPN-Intersection.

  3.  For each transport in Intersection-Transports, construct a
      ProtocolNameList containing the Identification Sequences of all
      the client's supported ALPN protocols for that transport, without
      regard to the SVCB ALPN set.

  For example, if the SVCB ALPN set is ["http/1.1", "h3"], and the
  client supports HTTP/1.1, HTTP/2, and HTTP/3, the client could
  attempt to connect using TLS over TCP with a ProtocolNameList of
  ["http/1.1", "h2"], and could also attempt a connection using QUIC,
  with a ProtocolNameList of ["h3"].

  Once the client has constructed a ClientHello, protocol negotiation
  in that handshake proceeds as specified in [ALPN], without regard to
  the SVCB ALPN set.

  With this procedure in place, an attacker who can modify DNS and
  network traffic can prevent a successful transport connection, but
  cannot otherwise interfere with ALPN protocol selection.  This
  procedure also ensures that each ProtocolNameList includes at least
  one protocol from the SVCB ALPN set.

  Clients SHOULD NOT attempt connection to a service endpoint whose
  SVCB ALPN set does not contain any supported protocols.  To ensure
  consistency of behavior, clients MAY reject the entire SVCB RRSet and
  fall back to basic connection establishment if all of the RRs
  indicate "no-default-alpn", even if connection could have succeeded
  using a non-default alpn.

  For compatibility with clients that require default transports, zone
  operators SHOULD ensure that at least one RR in each RRSet supports
  the default transports.

Tuple Fields§

§0: Vec<String>

Trait Implementations§

source§

impl<'r> BinDecodable<'r> for Alpn

source§

fn read(decoder: &mut BinDecoder<'r>) -> ProtoResult<Self>

This expects the decoder to be limited to only this field, i.e. the end of input for the decoder is the end of input for the fields

  The wire format value for "alpn" consists of at least one "alpn-id"
  prefixed by its length as a single octet, and these length-value
  pairs are concatenated to form the SvcParamValue.  These pairs MUST
  exactly fill the SvcParamValue; otherwise, the SvcParamValue is
  malformed.
source§

fn from_bytes(bytes: &'r [u8]) -> ProtoResult<Self>

Returns the object in binary form
source§

impl BinEncodable for Alpn

source§

fn emit(&self, encoder: &mut BinEncoder<'_>) -> ProtoResult<()>

The wire format value for “alpn” consists of at least one “alpn-id” prefixed by its length as a single octet, and these length-value pairs are concatenated to form the SvcParamValue. These pairs MUST exactly fill the SvcParamValue; otherwise, the SvcParamValue is malformed.

source§

fn to_bytes(&self) -> ProtoResult<Vec<u8>>

Returns the object in binary form
source§

impl Clone for Alpn

source§

fn clone(&self) -> Alpn

Returns a copy of the value. Read more
1.0.0 · source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
source§

impl Debug for Alpn

source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
source§

impl<'de> Deserialize<'de> for Alpn

source§

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more
source§

impl Display for Alpn

source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

The presentation “value” SHALL be a comma-separated list (Appendix A.1) of one or more “alpn-id“s.

source§

impl Hash for Alpn

source§

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher. Read more
1.3.0 · source§

fn hash_slice<H>(data: &[Self], state: &mut H)where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher. Read more
source§

impl PartialEq for Alpn

source§

fn eq(&self, other: &Alpn) -> bool

This method tests for self and other values to be equal, and is used by ==.
1.0.0 · source§

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
source§

impl Serialize for Alpn

source§

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>where __S: Serializer,

Serialize this value into the given Serde serializer. Read more
source§

impl Eq for Alpn

source§

impl StructuralEq for Alpn

source§

impl StructuralPartialEq for Alpn

Auto Trait Implementations§

§

impl RefUnwindSafe for Alpn

§

impl Send for Alpn

§

impl Sync for Alpn

§

impl Unpin for Alpn

§

impl UnwindSafe for Alpn

Blanket Implementations§

source§

impl<T> Any for Twhere T: 'static + ?Sized,

source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
source§

impl<T> Borrow<T> for Twhere T: ?Sized,

source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
source§

impl<T> BorrowMut<T> for Twhere T: ?Sized,

source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
§

impl<Q, K> Equivalent<K> for Qwhere Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

§

fn equivalent(&self, key: &K) -> bool

Checks if this value is equivalent to the given key. Read more
§

impl<Q, K> Equivalent<K> for Qwhere Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

§

fn equivalent(&self, key: &K) -> bool

Compare self to key and return true if they are equal.
source§

impl<T> From<T> for T

source§

fn from(t: T) -> T

Returns the argument unchanged.

source§

impl<T> Instrument for T

source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
source§

impl<T, U> Into<U> for Twhere U: From<T>,

source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

source§

impl<T> ToOwned for Twhere T: Clone,

§

type Owned = T

The resulting type after obtaining ownership.
source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
source§

impl<T> ToString for Twhere T: Display + ?Sized,

source§

default fn to_string(&self) -> String

Converts the given value to a String. Read more
source§

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

§

type Error = Infallible

The type returned in the event of a conversion error.
source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
source§

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<V, T> VZip<V> for Twhere V: MultiLane<T>,

§

fn vzip(self) -> V

source§

impl<T> WithSubscriber for T

source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more
source§

impl<T> DeserializeOwned for Twhere T: for<'de> Deserialize<'de>,