return &Response{
							Body:       NoBody,
							StatusCode: 200,
						}, nil
					}
					roundTripped = true
					return nil, http2noCachedConnError{}
				})
			},
		},
		DialTLS: func(_, _ string) (net.Conn, error) {
			tc, err := tls.Dial("tcp", addr, &tls.Config{
				InsecureSkipVerify: true,
				NextProtos:         []string{"foo"},
			})
			if err != nil {
				return nil, err
			}

	// If they aren't set then the documented contract is to use Dial or DialTLS, even
	// though they are deprecated. Therefore, if any of these are set, we should obey
	// the contract and dial using the regular round-trip instead. Otherwise, we'll try
	// to fall back on the Fetch API, unless it's not available.
	if t.Dial != nil || t.DialContext != nil || t.DialTLS != nil || t.DialTLSContext != nil || jsFetchMissing || jsFetchDisabled {

	// DialTLS specifies an optional dial function for creating
	// TLS connections for non-proxied HTTPS requests.
	//
	// Deprecated: Use DialTLSContext instead, which allows the transport
	// to cancel dials as soon as they are no longer needed.
	// If both are set, DialTLSContext takes priority.
	DialTLS func(network, addr string) (net.Conn, error)

func newHTTP2TransportGetter(cfg *Config) (httpTransportGetter, func()) {
	newConn := func() *http2.Transport {
		if cfg.scheme == scheme.HTTPS {
			return &http2.Transport{
				TLSClientConfig: cfg.tlsConfig,
				DialTLS: func(network, addr string, tlsConfig *tls.Config) (net.Conn, error) {
					return hbone.TLSDialWithDialer(newDialer(cfg), network, addr, tlsConfig)
				},
			}
		}

		return &http2.Transport{

pkg net/http, method (*Request) BasicAuth() (string, string, bool)

# CL 137940043 net/http: add Transport.DialTLS hook, Brad Fitzpatrick <******@****.***>
pkg net/http, type Transport struct, DialTLS func(string, string) (net.Conn, error)

# CL 132750043 net/http/httputil: Pass a Logger to ReverseProxy, allowing the user to control logging., Mark Theunissen <******@****.***>

// (to make the test reasonable) and then making a request which is
// canceled by the DialTLS hook, which then also waits to return the
// real connection until after the RoundTrip saw the error.  Then we
// know the successful tls.Dial from DialTLS will need to go into the
// idle pool. Then we give it a of time to explode.

		cfg.ServerName = host
	}
	return cfg
}

func (t *http2Transport) dialTLS(ctx context.Context, network, addr string, tlsCfg *tls.Config) (net.Conn, error) {
	if t.DialTLSContext != nil {
		return t.DialTLSContext(ctx, network, addr, tlsCfg)
	} else if t.DialTLS != nil {
		return t.DialTLS(network, addr, tlsCfg)
	}

	tlsCn, err := t.dialTLSWithContext(ctx, network, addr, tlsCfg)

	}))
	defer cst.close()

	var numOpen, numClose int32 // atomic

	tlsConfig := &tls.Config{InsecureSkipVerify: true}
	tr := &Transport{
		TLSClientConfig: tlsConfig,
		DialTLS: func(_, addr string) (net.Conn, error) {
			time.Sleep(10 * time.Millisecond)
			rc, err := net.Dial("tcp", addr)
			if err != nil {
				return nil, err
			}
			atomic.AddInt32(&numOpen, 1)

		{"TimeFormat", Const, 0},
		{"TimeoutHandler", Func, 0},
		{"TrailerPrefix", Const, 8},
		{"Transport", Type, 0},
		{"Transport.Dial", Field, 0},
		{"Transport.DialContext", Field, 7},
		{"Transport.DialTLS", Field, 4},
		{"Transport.DialTLSContext", Field, 14},
		{"Transport.DisableCompression", Field, 0},
		{"Transport.DisableKeepAlives", Field, 0},
		{"Transport.ExpectContinueTimeout", Field, 6},

pkg net/http, type ProtocolError //deprecated
pkg net/http, type Request struct, Cancel //deprecated
pkg net/http, type Transport struct, Dial //deprecated
pkg net/http, type Transport struct, DialTLS //deprecated
pkg net/http, var ErrHeaderTooLong //deprecated
pkg net/http, var ErrMissingContentLength //deprecated
pkg net/http, var ErrShortBody //deprecated
pkg net/http, var ErrUnexpectedTrailer //deprecated