).build()
    server.useHttps(serverHandshakeCertificates.sslSocketFactory())
    server.enqueue(MockResponse())

    // Make a request from client to server. It should succeed certificate checks (unfortunately the
    // rogue CA is trusted) but it should fail certificate pinning.
    val request =
      Request
        .Builder()
        .url(server.url("/"))
        .build()

pkg net/http, type ServeMux struct
pkg net/http, type Server struct
pkg net/http, type Server struct, Addr string
pkg net/http, type Server struct, Handler Handler
pkg net/http, type Server struct, MaxHeaderBytes int
pkg net/http, type Server struct, ReadTimeout time.Duration
pkg net/http, type Server struct, TLSConfig *tls.Config
pkg net/http, type Server struct, WriteTimeout time.Duration
pkg net/http, type Transport struct

			update = true
		}
		if ok && pi.completed {
			logger.LogIf(GlobalContext, "decommission", fmt.Errorf("pool(%s) = %s is decommissioned, please remove from server command line", humanize.Ordinal(pi.position+1), k))
		}
	}

	if len(specifiedPools) == len(rememberedPools) {
		for k, pi := range rememberedPools {
			pos, ok := specifiedPools[k]

    participant Proxy as Proxy/Load Balancer
    participant Server as FastAPI Server

    Client->>Proxy: HTTPS Request<br/>Host: mysuperapp.com<br/>Path: /items

    Note over Proxy: Proxy adds forwarded headers

    Proxy->>Server: HTTP Request<br/>X-Forwarded-For: [client IP]<br/>X-Forwarded-Proto: https<br/>X-Forwarded-Host: mysuperapp.com<br/>Path: /items

    Note over Server: Server interprets headers<br/>(if --forwarded-allow-ips is set)

Klaus Post <******@****.***> 1759093161 +0200

Aditya Manthramurthy <******@****.***> 1716591923 -0700

Klaus Post <******@****.***> 1756435188 +0200

Klaus Post <******@****.***> 1738353274 -0800

Klaus Post <******@****.***> 1756435188 +0200

Klaus Post <******@****.***> 1739205349 -0800