2 Commits

Include renames

Author	SHA1	Message	Date
ginuerzh	e543c0b0fd	fix(handler/http2): apply traffic limiter + stats to forward proxy path, decouple auth I/O, add idle timeout ... - Wrap non-CONNECT upstream with traffic_wrapper and stats_wrapper (was only on CONNECT path) - Write 503 error response on forwardRequest failure instead of silent connection close - Decouple resp.Header from w.Header() to prevent metadata header leakage/doubling in 407 responses - Return pipeTo signal from authenticate instead of dialing inline (matches http handler pattern) - Add idleTimeout metadata field and pass to xnet.Pipe for CONNECT tunnels - Add 4 tests for probe resistance host forwarding and knock bypass	2026-05-30 20:06:56 +08:00
ginuerzh	6ccaae0573	refactor(handler/http2): split handler into 3 focused files with 52 tests ... Extract authenticate/probe-resistance to auth.go and roundTrip/forwarding to proxy.go, following the handler/http/ pattern. Export sentinel errors (ErrAuthFailed, ErrWrongConnType) for precise test assertions. Fix flushWriter panic recovery to handle non-string/non-error panics. Default HTTPS port to 443 when no port is specified in the Host header.	2026-05-30 18:01:19 +08:00