Documentation
¶
Overview ¶
Package netguard is the one rule for where a download of a URL magpie didn't choose may connect: the gateway's (a caller's image, web_fetch, a vendor's image or video, generate_image's download) and a provider's icon. It judges addresses only; each caller decides what to do with a name's answers (pin them, or hand a proxy the name).
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func FakeIP ¶
FakeIP says a is in 198.18.0.0/15, RFC 2544's benchmarking range, where Clash's TUN mode with fake-ip, Clash Verge, Surge's enhanced mode and Loon answer every name, and carry a connection to it to the real host the name stands for (#252, #2593). No machine on the user's network sits there, so a connection to a fake-IP answer reaches the internet host the name stands for, or nothing; but which host that is, the fake-IP resolver decides where magpie can't see.
func LoonPaired ¶
LoonPaired says a is the AAAA record Loon synthesizes for an A answer (its IPv4 address inside fd27:712::/96) and that A answer is among answers. Such an a stands for that IPv4 address, which the caller judges on its own; a is not dialled. An unpaired one, or any other fc00::/7 address, is private as ever.
func Public ¶
Public says a is on the open internet: not loopback, RFC 1918, fc00::/7, link-local (169.254.169.254 among them), CGNAT, unspecified, multicast, documentation, reserved, benchmarking, Teredo, nor an IPv4-mapped, NAT64 or 6to4 form of one. A fake-IP resolver's answer is not public (FakeIP says when it may be fetched from all the same).
Types ¶
This section is empty.
Source Files