rules

type Action ¶

type Action string

Action is the result of a matching rule.

const (
	ActionAllow   Action = "allow"
	ActionDeny    Action = "deny"
	ActionRoute   Action = "route"
	ActionDeceive Action = "deceive"
)

type And ¶

type And struct{ Kids []Expr }

func (a And) Eval(c *fingerprint.RequestCtx) bool

type Cond ¶

type Cond struct {
	Matcher func(*fingerprint.RequestCtx) bool
}

Cond wraps a matcher function.

func (c Cond) Eval(ctx *fingerprint.RequestCtx) bool

type Engine ¶

type Engine struct {
	Rules         []*Rule
	DefaultAction Action
	// contains filtered or unexported fields
}

Engine evaluates incoming requests against loaded rules.

func (e *Engine) Eval(ctx *fingerprint.RequestCtx) (action Action, upstream, ruleID string)

func (e *Engine) EvalRule(ctx *fingerprint.RequestCtx) *Rule

func (e *Engine) Load(rs *RuleSet)

func (e *Engine) LoadFromFile(path string) error

type Expr ¶

type Expr interface {
	Eval(*fingerprint.RequestCtx) bool
}

Expr represents a boolean expression node.

type FieldGetter ¶

type FieldGetter func(*fingerprint.RequestCtx) []string

FieldGetter returns zero or more values for a field.

type Or ¶

type Or struct{ Kids []Expr }

func (o Or) Eval(c *fingerprint.RequestCtx) bool

type Rule ¶

type Rule struct {
	ID            string
	Action        Action
	DeceptionMode string
	Upstream      *url.URL
	StripPrefix   string
	Expires       *time.Time
	Expr          Expr
}

Rule is a compiled rule from the HCL file.

func (r *Rule) Matches(ctx *fingerprint.RequestCtx) bool

type RuleSet ¶

type RuleSet struct{ Rules []*Rule }

RuleSet is a set of compiled rules.

func LoadHCL(path string) (*RuleSet, error)

func LoadHCLBytes(data []byte) (*RuleSet, error)