Directories
¶
| Path | Synopsis |
|---|---|
|
Package ai defines interfaces for the AI assistant tool system.
|
Package ai defines interfaces for the AI assistant tool system. |
|
dto
Package dto provides dto functionality for CheeseWAF.
|
Package dto provides dto functionality for CheeseWAF. |
|
handler
Package handler provides handler functionality for CheeseWAF.
|
Package handler provides handler functionality for CheeseWAF. |
|
middleware
Package middleware provides middleware functionality for CheeseWAF.
|
Package middleware provides middleware functionality for CheeseWAF. |
|
Package apisec discovers API endpoints and validates API contracts.
|
Package apisec discovers API endpoints and validates API contracts. |
|
Package approval defines the in-process authorization boundary used by control-plane adapters.
|
Package approval defines the in-process authorization boundary used by control-plane adapters. |
|
runtime
Package runtime assembles the production approval boundary.
|
Package runtime assembles the production approval boundary. |
|
Package audit provides a metadata-only, append-only audit runtime.
|
Package audit provides a metadata-only, append-only audit runtime. |
|
Package blockpage provides blockpage functionality for CheeseWAF.
|
Package blockpage provides blockpage functionality for CheeseWAF. |
|
Package captcha provides the Altcha-compatible proof-of-work challenge used by the admin login flow and other browser-verification surfaces.
|
Package captcha provides the Altcha-compatible proof-of-work challenge used by the admin login flow and other browser-verification surfaces. |
|
Package cli implements the cobra command tree and BusyBox dispatch logic.
|
Package cli implements the cobra command tree and BusyBox dispatch logic. |
|
clilang
Package clilang provides CLI locale resolution and message catalogs.
|
Package clilang provides CLI locale resolution and message catalogs. |
|
migration
Package migration exposes the local CLI wrapper for the protected temporary-to-production migration contract.
|
Package migration exposes the local CLI wrapper for the protected temporary-to-production migration contract. |
|
tui
Package tui provides tui functionality for CheeseWAF.
|
Package tui provides tui functionality for CheeseWAF. |
|
consensus
Package consensus implements the single-node built-in coordinator for M3.
|
Package consensus implements the single-node built-in coordinator for M3. |
|
orchestrate
Package orchestrate implements M2 production-style cluster install/join and rolling upgrade flows.
|
Package orchestrate implements M2 production-style cluster install/join and rolling upgrade flows. |
|
redis
Package redis defines the Redis short-state boundary without a Redis client.
|
Package redis defines the Redis short-state boundary without a Redis client. |
|
traffic
Package traffic implements M4-style peer selection among cluster WAF nodes.
|
Package traffic implements M4-style peer selection among cluster WAF nodes. |
|
Package config handles YAML configuration loading, validation, and hot-reloading.
|
Package config handles YAML configuration loading, validation, and hot-reloading. |
|
Package controlplane contains the versioned control-plane contract.
|
Package controlplane contains the versioned control-plane contract. |
|
desiredstate
Package desiredstate contains versioned, control-plane-owned configuration documents.
|
Package desiredstate contains versioned, control-plane-owned configuration documents. |
|
materializer
Package materializer contains the node-local durability boundary for control-plane desired state.
|
Package materializer contains the node-local durability boundary for control-plane desired state. |
|
postgres
Package postgres provides the durable PostgreSQL adapter for the control-plane contract.
|
Package postgres provides the durable PostgreSQL adapter for the control-plane contract. |
|
runtime
Package runtime owns the standalone cheesewaf-control process.
|
Package runtime owns the standalone cheesewaf-control process. |
|
Package crp defines the content-addressed contract for a CheeseWAF Resource Package (CRP).
|
Package crp defines the content-addressed contract for a CheeseWAF Resource Package (CRP). |
|
activation
Package activation owns the control-plane lifecycle around CRP runtime records.
|
Package activation owns the control-plane lifecycle around CRP runtime records. |
|
activation/postgres
Package postgres provides the durable CRP activation authorization adapter.
|
Package postgres provides the durable CRP activation authorization adapter. |
|
Package cwedp contains the pure protocol contract for CheeseWAF Edge Distribution Protocol.
|
Package cwedp contains the pure protocol contract for CheeseWAF Edge Distribution Protocol. |
|
consumer
Package consumer composes the CWEDP protocol, transport, durable resume store, and CRP staging boundary for one management-plane request.
|
Package consumer composes the CWEDP protocol, transport, durable resume store, and CRP staging boundary for one management-plane request. |
|
postgres
Package postgres provides the durable PostgreSQL ResumeStore adapter for CWEDP.
|
Package postgres provides the durable PostgreSQL ResumeStore adapter for CWEDP. |
|
transport
Package transport implements the I/O side of CWEDP.
|
Package transport implements the I/O side of CWEDP. |
|
Package diagnostics defines the in-process contract for diagnostic uploads.
|
Package diagnostics defines the in-process contract for diagnostic uploads. |
|
envelope
Package envelope implements the application-side diagnostic encryption contract.
|
Package envelope implements the application-side diagnostic encryption contract. |
|
integration
Package integration composes the diagnostics admission broker, encrypted envelope, durable queue, and metadata-only audit runtime into one lifecycle.
|
Package integration composes the diagnostics admission broker, encrypted envelope, durable queue, and metadata-only audit runtime into one lifecycle. |
|
postgres
Package postgres provides an opt-in metadata persistence adapter for diagnostics.
|
Package postgres provides an opt-in metadata persistence adapter for diagnostics. |
|
queue
Package queue implements the local, durable half of diagnostic delivery.
|
Package queue implements the local, durable half of diagnostic delivery. |
|
Package edge applies request header, cache, and compression policies.
|
Package edge applies request header, cache, and compression policies. |
|
Package engine provides SQL token fingerprints and contextual XSS detection.
|
Package engine provides SQL token fingerprints and contextual XSS detection. |
|
decoder
Package decoder provides safe, bounded decoding helpers for the detection pipeline.
|
Package decoder provides safe, bounded decoding helpers for the detection pipeline. |
|
response
Package response detects sensitive data in upstream responses.
|
Package response detects sensitive data in upstream responses. |
|
rules
Package rules implements configurable request matching for CheeseWAF.
|
Package rules implements configurable request matching for CheeseWAF. |
|
semantic
Package semantic provides semantic functionality for CheeseWAF.
|
Package semantic provides semantic functionality for CheeseWAF. |
|
Package fsguard centralizes filesystem and URL path safety for operator-configured paths and same-origin relative redirects.
|
Package fsguard centralizes filesystem and URL path safety for operator-configured paths and same-origin relative redirects. |
|
Package identity defines canonical identity-field rules shared by setup, API, CLI, and authentication boundaries.
|
Package identity defines canonical identity-field rules shared by setup, API, CLI, and authentication boundaries. |
|
Package monitor exposes metrics, alerting, and remote write helpers.
|
Package monitor exposes metrics, alerting, and remote write helpers. |
|
Package netlease defines the no-I/O contract for offline egress policy and short-lived, administrator-approved plugin socket leases.
|
Package netlease defines the no-I/O contract for offline egress policy and short-lived, administrator-approved plugin socket leases. |
|
Package passpolicy enforces CheeseWAF admin password rules for setup, API, and CLI.
|
Package passpolicy enforces CheeseWAF admin password rules for setup, API, and CLI. |
|
perf
|
|
|
gctune
Package gctune provides hardware-aware, self-adjusting garbage collector tuning for long-running CheeseWAF processes.
|
Package gctune provides hardware-aware, self-adjusting garbage collector tuning for long-running CheeseWAF processes. |
|
protection
|
|
|
acl
Package acl implements method, path, and header access control.
|
Package acl implements method, path, and header access control. |
|
bot
Package bot implements lightweight bot scoring and JS clearance challenges.
|
Package bot implements lightweight bot scoring and JS clearance challenges. |
|
ip
Package ip provides ip functionality for CheeseWAF.
|
Package ip provides ip functionality for CheeseWAF. |
|
presentation
Package presentation provides reversible display transforms.
|
Package presentation provides reversible display transforms. |
|
ratelimit
Package ratelimit implements per-key fixed-window request limits.
|
Package ratelimit implements per-key fixed-window request limits. |
|
tamper
Package tamper provides tamper functionality for CheeseWAF.
|
Package tamper provides tamper functionality for CheeseWAF. |
|
webshell
Package webshell provides webshell functionality for CheeseWAF.
|
Package webshell provides webshell functionality for CheeseWAF. |
|
Package proxy provides proxy functionality for CheeseWAF.
|
Package proxy provides proxy functionality for CheeseWAF. |
|
Package realtime defines interfaces for real-time communication between the backend and frontend (WebSocket / SSE fallback).
|
Package realtime defines interfaces for real-time communication between the backend and frontend (WebSocket / SSE fallback). |
|
Package recovery defines the pure-Go recovery credential and wrapping-key contract.
|
Package recovery defines the pure-Go recovery credential and wrapping-key contract. |
|
kms
Package kms contains the executable KMS and single-node keyring boundary used by recovery integrations.
|
Package kms contains the executable KMS and single-node keyring boundary used by recovery integrations. |
|
Package scheduler runs lightweight operational jobs.
|
Package scheduler runs lightweight operational jobs. |
|
Package setup provides setup functionality for CheeseWAF.
|
Package setup provides setup functionality for CheeseWAF. |
|
migration
Package migration contains the protected temporary-to-production cut-over contract.
|
Package migration contains the protected temporary-to-production cut-over contract. |
|
Package storage defines interfaces for data persistence.
|
Package storage defines interfaces for data persistence. |
|
log_sink
Package log_sink provides log_sink functionality for CheeseWAF.
|
Package log_sink provides log_sink functionality for CheeseWAF. |
|
postgres
Package postgres implements the durable management storage.Store adapter.
|
Package postgres implements the durable management storage.Store adapter. |
|
Package timekeeper provides a process-wide disciplined clock and NTP service.
|
Package timekeeper provides a process-wide disciplined clock and NTP service. |
|
Package tokens defines the in-process contract for scoped management tokens.
|
Package tokens defines the in-process contract for scoped management tokens. |
|
postgres
Package postgres provides the durable token persistence boundary.
|
Package postgres provides the durable token persistence boundary. |
|
service
Package service provides the durable adapter for scoped management tokens.
|
Package service provides the durable adapter for scoped management tokens. |
|
Package webui serves the admin console files baked into the CheeseWAF binary.
|
Package webui serves the admin console files baked into the CheeseWAF binary. |
|
Package winctl implements the lightweight local service controller used by the Windows GUI (and optionally other desktop shells).
|
Package winctl implements the lightweight local service controller used by the Windows GUI (and optionally other desktop shells). |
Click to show internal directories.
Click to hide internal directories.