BlockLocal blocks attempted accesses to localhost unless they're one of the listed exceptions.

RateLimit restricts access to only specific hosts and limits the rate at which clients (identified by IP address) are allowed to access thoses hosts.

RestrictConnectPorts restricts CONNECT requests to the given list of allowed ports and returns either a 400 error if the request is missing a port or a 403 error if the port is not allowed.

AddForwardedFor adds an X-Forwarded-For header based on the request's RemoteAddr.

DiscardInitialPersistentRequest discards the initial request for persistent HTTP connections from the Lantern client.

RecordOp records the proxy_http op.