demo · v144

Address Classifier

LNA classifies every destination into public, private, or loopback. The page’s own address space and the target address space together decide whether a WebTransport connection goes straight through, prompts the user, or is refused. Pick an origin/target pair and see what Chrome would do.

LNA still rolling out in Chrome 144. Try chrome://flags/#local-network-access-check to force the policy. The matrix below reflects the shipping rules.

your page

page address space: public

WebTransport target

target address space: private

examples:

verdict

choose an example or edit the URLs to see how Chrome classifies the pair.

full matrix

the policy

// page address space (less private) connecting to target (more private)
// Chrome 144 + LNA: requires Permissions Policy + a user prompt.
//
// page   target    ->  policy
// public public    ->  allowed
// public private   ->  permission prompt
// public loopback  ->  permission prompt
// private private  ->  allowed (same level)
// private loopback ->  permission prompt
// loopback *       ->  allowed
//
// WebTransport joins fetch and WebSocket in this gate.

see also