mirror of
https://github.com/hanzoai/ingress.git
synced 2026-10-26 02:47:15 +00:00
zeekay
9955c3ecf6
Wrap each backend RoundTripper returned by TransportManager with a thin zapBackendRoundTripper that dials selected upstreams via github.com/zap-proto/http instead of net/http. Allowlist comes from env INGRESS_ZAP_BACKENDS (comma-separated host:port). Empty/unset env keeps the wrapped transport untouched, so the change is purely additive. External (client-facing) TLS termination is unchanged. CRD schema is unchanged. One *zaphttp.Transport per backend addr (zaphttp pins to a single peer and ignores req.URL.Host). Adds reference doc with IngressRoute example and notes LLM.md.