What problem does it solve?
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for reverse proxies, Host headers, forwarded headers, vhost routing, websocket upgrades, path-prefix rewriting, base-URL derivation, and multi-node route resolution. Use when the user asks which host or container serves a route, why a public-looking domain still belongs to the sandbox, how headers or proxies change behavior, or how a route resolves across proxy, container, and worker boundaries. Use only after $ctf-sandbox-orchestrator has already established sandbox assumptions and routed here.
Core Features & Use Cases
- Routing map construction: map host, proxy rule, target service, and downstream process for a live route.
- Header provenance tracking: record Host, X-Forwarded-Host, X-Forwarded-Proto, and related headers used in routing decisions.
- Audit-ready evidence generation: preserve maps and traces for verification across sandbox boundaries.
Quick Start
Assume the sandbox is active and map a live route from host to proxy rule to service, documenting each step and the involved headers.