httpmirror

type Logger interface {
	// Println logs a message with the provided arguments.
	Println(v ...interface{})
}

type MirrorHandler struct {
	// RemoteCache is the cache of the remote file system.
	// When set, files are cached in the storage backend and clients
	// are redirected to signed URLs. When nil, requests are proxied directly.
	RemoteCache *sss.SSS

	// LinkExpires is the expiration duration for signed URLs.
	// Only used when RemoteCache is configured.
	// Default should be 24 hours.
	LinkExpires time.Duration

	// BaseDomain is the domain name suffix to filter requests.
	// If set, only requests to hosts ending with this suffix are processed.
	// Leave empty to process all valid domain requests.
	BaseDomain string

	// Client is the HTTP client used for requests to source servers.
	// If nil, a default client with ProxyDial will be created.
	Client *http.Client

	// ProxyDial specifies the optional proxy dial function for
	// establishing transport connections to source servers.
	ProxyDial func(context.Context, string, string) (net.Conn, error)

	// NotFound is the handler for requests that don't match any proxy rules.
	// If nil, http.NotFound is used.
	NotFound http.Handler

	// Logger is used for error and informational logging.
	// If nil, no logging is performed.
	Logger Logger

	// CheckSyncTimeout is the timeout for checking if cached content
	// is synchronized with the source. When > 0, the handler verifies
	// that cached files match the source size before serving.
	// Set to 0 to disable sync checking.
	CheckSyncTimeout time.Duration

	// Host is the target host for all requests.
	Host string

	// HostFromFirstPath enables extracting the target host from the first
	// path segment instead of the Host header.
	// When true, URLs like /example.com/path/file become requests to
	// https://example.com/path/file
	HostFromFirstPath bool

	// BlockSuffix is a list of file suffixes to block.
	// Requests for files ending with these suffixes return 403 Forbidden.
	// Example: []string{".exe", ".msi"}
	BlockSuffix []string

	// NoRedirect disables HTTP redirects to signed URLs for cached content.
	// When true, the handler serves cached content directly instead of
	// redirecting clients to signed URLs from RemoteCache.
	// This is useful for clients that don't handle redirects well or when
	// you want the proxy to serve all traffic directly.
	NoRedirect bool

	// TeeResponse is used to tee the response body for caching while serving.
	// When true, the handler will write the response to a tee while
	// caching it in RemoteCache. This allows for streaming responses to clients
	// while simultaneously caching them.
	TeeResponse bool

	// CIDNClient is the Kubernetes client for CIDN integration.
	// When set along with RemoteCache, enables distributed blob management.
	CIDNClient versioned.Interface

	// CIDNBlobInformer watches for CIDN Blob resource changes.
	// Used to monitor blob sync status when CIDN is enabled.
	CIDNBlobInformer informers.BlobInformer

	// CIDNDestination is the destination name for CIDN blobs.
	// Typically set to the storage backend scheme (e.g., "s3").
	CIDNDestination string

	// CIDNMaximumRunning is the maximum number of running CIDN blob sync operations.
	CIDNMaximumRunning int64

	// CIDNMinimumChunkSize is the minimum chunk size for CIDN blob sync operations.
	CIDNMinimumChunkSize int64
	// contains filtered or unexported fields
}