Enum EgressError 

pub enum EgressError {
    Network(NetworkGuardError),
    InvalidHostPattern(String),
    InvalidNat64Prefix(String),
    InvalidConnectionLimit,
    PermissionDenied {
        transport: EgressTransport,
        permission: PluginPermission,
    },
    DestinationNotGranted {
        instance: String,
        host: String,
    },
    InvalidTlsProfileName(String),
    InvalidTlsProfile {
        profile: String,
        reason: String,
    },
    DuplicateTlsProfile(String),
    TlsProfileWithoutHosts(String),
    TlsProfileHostNotGranted {
        profile: String,
        host: String,
    },
    TlsProfileOnPlaintext(EgressTransport),
    UnknownTlsProfile(String),
    TlsProfileHostDenied {
        profile: String,
        host: String,
    },
    InvalidTlsMaterial {
        profile: String,
        part: String,
    },
    AuthorizationScopeMismatch,
    TlsSecretUnavailable {
        profile: String,
        property: String,
    },
    TlsConfigMismatch,
    DnsFailed {
        host: String,
        port: u16,
        reason: String,
    },
    ConnectionLimitReached {
        instance: String,
        limit: usize,
    },
    InvalidStartTlsTransition {
        from: StartTlsPhase,
        to: StartTlsPhase,
    },
    PolicyUnavailable(String),
}

Failure at the shared plugin egress boundary.

Variants

Network(NetworkGuardError)

Host/address policy rejection from the shared network guard.

InvalidHostPattern(String)

Invalid pattern in the canonical operator allowlist.

InvalidNat64Prefix(String)

Invalid security.nat64_prefixes entry. Fails the policy closed rather than quietly narrowing the validation boundary.

InvalidConnectionLimit

A policy returned an unsafe zero connection ceiling.

PermissionDenied

The admitted instance lacks the transport’s effective grant.

Fields

transport: EgressTransport

permission: PluginPermission

DestinationNotGranted

The destination is not in this instance’s operator-granted allowlist.

Fields

instance: String

host: String

InvalidTlsProfileName(String)

Invalid TLS profile slug.

InvalidTlsProfile

Incoherent TLS profile definition.

Fields

profile: String

reason: String

DuplicateTlsProfile(String)

Two profiles on one instance share a name.

TlsProfileWithoutHosts(String)

A TLS profile binds no destination.

TlsProfileHostNotGranted

A TLS profile names a host the instance’s grant does not contain.

Fields

profile: String

host: String

TlsProfileOnPlaintext(EgressTransport)

A transport that never carries TLS selected a TLS profile.

UnknownTlsProfile(String)

The selected TLS profile is not configured on this instance.

TlsProfileHostDenied

The selected TLS profile does not cover this destination.

Fields

profile: String

host: String

InvalidTlsMaterial

A selected TLS profile’s certificate material is missing or invalid.

Fields

profile: String

part: String

AuthorizationScopeMismatch

An adapter used an authorization issued to a different instance.

TlsSecretUnavailable

A selected TLS profile names a secret this instance cannot resolve.

Fields

profile: String

property: String

TlsConfigMismatch

Frame material and request authorization do not describe one config view.

DnsFailed

DNS resolution failed before policy could pin an address set.

Fields

host: String

port: u16

reason: String

ConnectionLimitReached

The per-instance cross-transport connection ceiling is full.

Fields

instance: String

limit: usize

InvalidStartTlsTransition

STARTTLS attempted a transition that could enable downgrade/fallback.

Fields

from: StartTlsPhase

to: StartTlsPhase

PolicyUnavailable(String)

Canonical host policy could not be resolved.

Trait Implementations

impl Debug for EgressError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for EgressError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for EgressError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<NetworkGuardError> for EgressError

fn from(source: NetworkGuardError) -> Self

Converts to this type from the input type.