Conrad Ludgate 6131d86ec9 proxy: allow invalid SNI (#11792) ...

## Problem

Some PrivateLink customers are unable to use Private DNS. As such they
use an invalid domain name to address Neon. We currently are rejecting
those connections because we cannot resolve the correct certificate.

## Summary of changes

1. Ensure a certificate is always returned.
2. If there is an SNI field, use endpoint fallback if it doesn't match.

I suggest reviewing each commit separately.

2025-05-05 11:18:55 +00:00

..

auth

proxy: allow invalid SNI (#11792)

2025-05-05 11:18:55 +00:00

bin

proxy: Move binaries into the lib (#10758)

2025-02-11 19:46:23 +00:00

binary

pg-sni-router: support compute TLS on different port (#11732)

2025-04-28 11:29:44 +00:00

cache

Allow unwrap() in tests when clippy::unwrap_used is denied (#11616)

2025-04-16 20:05:21 +00:00

compute_ctl

proxy: Move binaries into the lib (#10758)

2025-02-11 19:46:23 +00:00

context

Allow unwrap() in tests when clippy::unwrap_used is denied (#11616)

2025-04-16 20:05:21 +00:00

control_plane

fix(proxy): s/Console/Control plane/ in cplane error (#11716)

2025-04-25 11:09:56 +00:00

http

Upgrade proxy crates to edition 2024 (#10942)

2025-02-24 15:26:28 +00:00

pglb

proxy/pglb: Add in-process connection support (#11677)

2025-04-23 12:18:30 +00:00

proxy

proxy: allow invalid SNI (#11792)

2025-05-05 11:18:55 +00:00

rate_limiter

Allow unwrap() in tests when clippy::unwrap_used is denied (#11616)

2025-04-16 20:05:21 +00:00

redis

feat(proxy): add batching to cancellation queue processing (#10607)

2025-04-12 09:16:22 +00:00

sasl

Allow unwrap() in tests when clippy::unwrap_used is denied (#11616)

2025-04-16 20:05:21 +00:00

scram

Allow unwrap() in tests when clippy::unwrap_used is denied (#11616)

2025-04-16 20:05:21 +00:00

serverless

proxy: allow invalid SNI (#11792)

2025-05-05 11:18:55 +00:00

tls

proxy: allow invalid SNI (#11792)

2025-05-05 11:18:55 +00:00

cancellation.rs

feat(proxy): add batching to cancellation queue processing (#10607)

2025-04-12 09:16:22 +00:00

compute.rs

fix(proxy): Add testodrome query id HTTP header (#11167)

2025-03-11 17:17:30 +00:00

config.rs

feat(compute_ctl): use TLS if configured (#10972)

2025-03-13 15:03:22 +00:00

console_redirect_proxy.rs

feat(proxy): Return prefixed errors to testodrome (#11561)

2025-04-16 19:03:23 +00:00

error.rs

proxy: Fix some clippy warnings coming in next versions (#11359)

2025-03-26 10:50:16 +00:00

ext.rs

chore(proxy): disallow unwrap and unimplemented (#10142)

2024-12-16 16:37:15 +00:00

intern.rs

Allow unwrap() in tests when clippy::unwrap_used is denied (#11616)

2025-04-16 20:05:21 +00:00

jemalloc.rs

chore(local_proxy): reduce some startup logging (#9798)

2024-11-19 13:58:11 +00:00

lib.rs

proxy/pglb: Add in-process connection support (#11677)

2025-04-23 12:18:30 +00:00

logging.rs

proxy: Enable JSON logging by default (#11772)

2025-04-29 13:11:24 +00:00

metrics.rs

chore(proxy): pre-initialise metricvecs (#11226)

2025-03-13 20:23:53 +00:00

parse.rs

chore(proxy): disallow unwrap and unimplemented (#10142)

2024-12-16 16:37:15 +00:00

protocol2.rs

proxy: Update zerocopy to 0.8 (#11681)

2025-04-24 09:39:08 +00:00

signals.rs

Upgrade proxy crates to edition 2024 (#10942)

2025-02-24 15:26:28 +00:00

stream.rs

feat(proxy): Return prefixed errors to testodrome (#11561)

2025-04-16 19:03:23 +00:00

types.rs

feat(proxy): Implement access control with VPC endpoint checks and block for public internet / VPC (#10143)

2025-01-31 20:32:57 +00:00

url.rs

Allow unwrap() in tests when clippy::unwrap_used is denied (#11616)

2025-04-16 20:05:21 +00:00

usage_metrics.rs

Allow unwrap() in tests when clippy::unwrap_used is denied (#11616)

2025-04-16 20:05:21 +00:00

waiters.rs

2024 oct new clippy lints (#9448)

2024-10-18 10:27:50 +01:00