Name Description Size Coverage
IPPAlwaysOn.sys.mjs Keeps the proxy connection alive on enterprise builds where the AccessConnector policy is active. Unlike IPPAutoStart, this class: - Recovers from ERROR states by stopping and restarting immediately. - Restarts immediately when the proxy stops unexpectedly. - Switches to a new server when the server list is updated. Because this is policy-driven there is no user-facing toggle; the proxy runs whenever the service is ready and the policy is set. 7287 -
IPPEnterpriseAuthProvider.sys.mjs Enterprise / Access-Connector implementation of IPPAuthProvider. The enterprise build always treats the user as signed-in and entitled. The OAuth token comes from `Services.felt`, registered by `browser/extensions/felt/api.js`. fetchProxyPass hits the access-connector endpoint configured by `browser.ipProtection.guardian.endpoint` (same pref and route as Guardian, but a different backend that does not emit `X-Quota-*` headers — hence usage is canned, not parsed). 5120 -