mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-18 05:39:50 +08:00
Closes #362 Split the CONNECT log emission in the proxy so denied connections log immediately as CONNECT while allowed connections defer logging until after the L7 config check. When L7 inspection follows, emit CONNECT_L7 instead of CONNECT so log consumers can distinguish standalone L4 policy decisions from tunnel lifecycle events.