Namespace Titanium.Web.Proxy.Models

Classes

ExplicitProxyEndPoint

A proxy endpoint that the client is aware of. So client application know that it is communicating with a proxy server.

ExternalProxy

An upstream proxy this proxy uses if any.

ProxyAuthenticationContext

A context container for authentication flows

ProxyEndPoint

An abstract endpoint where the proxy listens

SocksProxyEndPoint

A proxy end point client is not aware of. Useful when requests are redirected to this proxy end point through port forwarding via router.

TransparentProxyEndPoint

A proxy end point client is not aware of. Useful when requests are redirected to this proxy end point through port forwarding via router.

When EnableHttp3 is true (and EnableHttp3 is enabled with DecryptSsl), the endpoint also listens for HTTP/3 on the same IP:port over UDP and injects Alt-Svc: h3=":PORT" into H1/H2 responses — reverse HTTPS with Alt-Svc advertisement.

TransparentQuicProxyEndPoint

A transparent proxy endpoint that listens on UDP/QUIC and intercepts HTTP/3 traffic. Clients are not aware of the proxy; traffic must be directed here via firewall/NAT redirection.

QUIC always terminates TLS 1.3 at the proxy — there is no pass-through mode. An IOriginalDestinationResolver must be configured (or a fixed ForwardHost / ForwardPort fallback) so the proxy knows which origin server each connection is intended for.

Platform requirement: IsSupported must be true (MsQuic native library present, OS version supported). If it is false, Start(bool) will throw PlatformNotSupportedException.

ECH constraint: when managed DNS advertises ECH for intercepted names, the hidden SNI is encrypted and cannot be extracted here. Either disable ECH for intercepted names in your managed DNS, or configure managed clients to disable ECH.

Experimental: HTTP/3 support has not yet completed the full interop/soak/fuzz gate process. Suppress TWP001 to opt in.

WinAuthCredentials

Windows authentication credentials for NTLM/Negotiate/Kerberos (issue #461). Prefer supplying these through WinAuthCredentialsProvider rather than storing plaintext on session event args.

Structs

HttpInterceptionContext

Minimal, read-only context passed to ShouldInterceptHttp to let callers route requests to the fast-forward path or the full interception path without materialising a SessionEventArgs.

Interfaces

IExternalProxy

Enums

ExternalProxyType

OriginHttpVersionPolicy

Controls which HTTP version the proxy declares to the origin server on the request line, independently of the version the client itself declared on its own connection to the proxy.

HTTP/1.0 and HTTP/1.1 share the same start-line/header/body wire format, so switching between them needs no message translation - only the declared version and the resulting default persistence (KeepAlive) change. The response is always written back to the client using the client's own originally declared version and its own persistence rules, regardless of this policy.

ProxyAuthenticationResult

ProxyProtocolType

UpstreamHttpProtocol

Controls which HTTP version the proxy uses on its own connection to the origin server, independent of which HTTP version the client used to talk to the proxy. Set a connection-level default on UpstreamHttpProtocol (during BeforeTunnelConnectRequest), UpstreamHttpProtocol (during BeforeSslAuthenticate), or UpstreamHttpProtocol (during BeforeQuicAuthenticate). Per-request overrides are available via UpstreamHttpProtocol in BeforeRequest.