Module net 

Networking helpers that sit beside the protocol engines: the g-dns redirect scheme and (for ACME) ClientHello inspection.

Modules

clienthello

Non-consuming TLS ClientHello inspection: extract the SNI host and offered ALPN protocols from buffered handshake bytes, so the server can choose which certificate to present (a cached one, an on-demand ACME issuance, or the acme-tls/1 challenge cert) before committing to a TLS connection.

gdns

IP-to-g-dns.net host encoding and the HTTP→HTTPS redirect policy.