A framework that can intercept and block http/https traffic

I'm looking for a way to intercept http/https traffic using .NET Core and C#. It should be possible to block a certain request or response based on its content. The idea is to have a small DNS server as part of the C# solution; this server should resolve all domains to [login to view URL] That way all traffic will be routed to the software. Then the software can use some kind of listener to intercept the http/https requests that are now routed to it. If the request contains anything that should be blocked a custom response is send to the user, if not the request is send to the destination server on behalf of the user and if the response from the server doesn't contain anything that should be blocked it is just passed on to the user. If the response should be blocked the user receives a custom response instead. I'm thinking that this should be a small framework with a few interfaces that can be implemented, so you can construct your own logic for when a request or response should be blocked. Whenever something is blocked it should be possible to create your own response and forward that to the user. An idea for an interface that could be used when invoking the framework to block a request/response follows here: interface IIntercepter { ICustomResponse ShouldBlockRequest(IRequest); ICustomResponse ShouldBlockResponse(IResponse); } The idea is that any http/https request or response is passed to the methods defined in the above interface and then in the cases where a request/response should be blocked they return an object of the type ICustomResponse, in cases where a request/response shouldn't be blocked null is returned. Furthermore in the case of https traffic the software should generate an SSL certificate for each domain and sign it with a CA certificate that can be installed in the computer's root certificate store. These certificates that are generated for every domain should be used when the user accesses a website so he/she can visit https sites without the browser throwing a warning. The generated certificates should have the same validation level as the website that the framework is visiting on behalf of the user. Meaning if the website uses a domain validation certificate the user should be presented with such a certificate, if the website uses an organization validation certificate the user should be presented with such a certificate. In the case of invalid SSL certificates the user should also be presented with an invalid certificate. In the case of extended validation certificates the user should be presented with an organization validation certificate, seeing as you can’t sign your own extended validation certificates. If you feel like you are the right person to solve this task, please write me a message describing how you will solve it. If anything is unclear feel free to ask!