Add plain HTTP egress forwarding

litebox_egress_proxy/Cargo.toml

@@ -14,6 +14,7 @@ clap = { version = "4.5", default-features = false, features = [
 hashbrown = "0.15.2"
 http-body-util = { version = "0.1.3", default-features = false }
 hyper = { version = "1.8", default-features = false, features = [
+    "client",
     "http1",
     "server",
 ] }

litebox_egress_proxy/src/config.rs

@@ -14,7 +14,7 @@ use crate::policy::{HostPolicy, PolicyError};
 #[derive(Debug, Parser)]
 #[command(
     name = "litebox_egress_proxy",
-    about = "Hostname-filtering CONNECT egress proxy"
+    about = "Hostname-filtering HTTP/HTTPS egress proxy"
 )]
 pub struct Cli {
     /// Loopback address to bind, for example `127.0.0.1:0`.

litebox_egress_proxy/src/lib.rs

@@ -1,11 +1,12 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT license.
 
-//! A standalone, hostname-filtering CONNECT egress proxy for LiteBox.
+//! A standalone, hostname-filtering HTTP and HTTPS egress proxy for LiteBox.
 //!
 //! Authorized hostnames are resolved on demand through the trusted host
-//! resolver, then connected using the returned numeric addresses. CONNECT
-//! tunnels relay bytes without inspecting or terminating TLS.
+//! resolver, then connected using the returned numeric addresses. Plain HTTP
+//! requests are forwarded without buffering their bodies; HTTPS connections
+//! use CONNECT tunnels that relay bytes without inspecting or terminating TLS.
 
 extern crate alloc;