Documentation
¶
Index ¶
- Variables
- func AppsecEventGeneration(inEvt pipeline.Event, request *http.Request) (*pipeline.Event, error)
- func AppsecEventGenerationGeoIPEnrich(src *models.Source) error
- func EventFromRequest(r *appsec.ParsedRequest, labels map[string]string, txUuid string) (pipeline.Event, error)
- func LogAppsecEvent(evt *pipeline.Event, logger *log.Entry)
- func RegisterRX()
- type AppsecRunner
- func (r *AppsecRunner) AccumulateTxToEvent(evt *pipeline.Event, state *appsec.AppsecRequestState, ...)
- func (r *AppsecRunner) Init(datadir string) error
- func (*AppsecRunner) MergeDedupRules(collections []appsec.AppsecCollection, logger *log.Entry) string
- func (r *AppsecRunner) ProcessInBandRules(state *appsec.AppsecRequestState, request *appsec.ParsedRequest) error
- func (r *AppsecRunner) ProcessOutOfBandRules(state *appsec.AppsecRequestState, request *appsec.ParsedRequest) error
- func (r *AppsecRunner) Run(t *tomb.Tomb) error
- type AuthCache
- type Configuration
- type Source
- func (*Source) CanRun() error
- func (w *Source) Configure(_ context.Context, yamlConfig []byte, logger *log.Entry, ...) error
- func (w *Source) Dump() any
- func (*Source) GetAggregMetrics() []prometheus.Collector
- func (*Source) GetMetrics() []prometheus.Collector
- func (w *Source) GetMode() string
- func (*Source) GetName() string
- func (w *Source) GetUuid() string
- func (w *Source) StreamingAcquisition(ctx context.Context, out chan pipeline.Event, t *tomb.Tomb) error
- func (w *Source) UnmarshalConfig(yamlConfig []byte) error
Constants ¶
This section is empty.
Variables ¶
View Source
var CRSAnomalyScores = []string{
"sql_injection_score",
"xss_score",
"rfi_score",
"lfi_score",
"rce_score",
"php_injection_score",
"http_violation_score",
"session_fixation_score",
"anomaly_score",
}
View Source
var DefaultAuthCacheDuration = (1 * time.Minute)
Functions ¶
func AppsecEventGeneration ¶
func AppsecEventGenerationGeoIPEnrich ¶ added in v1.6.5
func EventFromRequest ¶
func RegisterRX ¶
func RegisterRX()
RegisterRX registers the rx operator using a WASI implementation instead of Go.
Types ¶
type AppsecRunner ¶
type AppsecRunner struct {
UUID string
AppsecRuntime *appsec.AppsecRuntimeConfig //this holds the actual appsec runtime config, rules, remediations, hooks etc.
AppsecInbandEngine coraza.WAF
AppsecOutbandEngine coraza.WAF
Labels map[string]string
// contains filtered or unexported fields
}
that's the runtime structure of the Application security engine as seen from the acquis
func (*AppsecRunner) AccumulateTxToEvent ¶
func (r *AppsecRunner) AccumulateTxToEvent(evt *pipeline.Event, state *appsec.AppsecRequestState, req *appsec.ParsedRequest)
func (*AppsecRunner) Init ¶
func (r *AppsecRunner) Init(datadir string) error
func (*AppsecRunner) MergeDedupRules ¶ added in v1.6.5
func (*AppsecRunner) MergeDedupRules(collections []appsec.AppsecCollection, logger *log.Entry) string
func (*AppsecRunner) ProcessInBandRules ¶
func (r *AppsecRunner) ProcessInBandRules(state *appsec.AppsecRequestState, request *appsec.ParsedRequest) error
func (*AppsecRunner) ProcessOutOfBandRules ¶
func (r *AppsecRunner) ProcessOutOfBandRules(state *appsec.AppsecRequestState, request *appsec.ParsedRequest) error
type AuthCache ¶
func NewAuthCache ¶
func NewAuthCache() AuthCache
type Configuration ¶ added in v1.7.4
type Configuration struct {
ListenAddr string `yaml:"listen_addr"`
ListenSocket string `yaml:"listen_socket"`
CertFilePath string `yaml:"cert_file"`
KeyFilePath string `yaml:"key_file"`
Path string `yaml:"path"`
Routines int `yaml:"routines"`
AppsecConfig string `yaml:"appsec_config"`
AppsecConfigs []string `yaml:"appsec_configs"`
AppsecConfigPath string `yaml:"appsec_config_path"`
AuthCacheDuration *time.Duration `yaml:"auth_cache_duration"`
configuration.DataSourceCommonCfg `yaml:",inline"`
}
configuration structure of the acquis for the application security engine
type Source ¶ added in v1.7.4
type Source struct {
InChan chan appsec.ParsedRequest
AppsecRuntime *appsec.AppsecRuntimeConfig
AppsecConfigs map[string]appsec.AppsecConfig
AuthCache AuthCache
AppsecRunners []AppsecRunner // one for each go-routine
// contains filtered or unexported fields
}
func (*Source) GetAggregMetrics ¶ added in v1.7.4
func (*Source) GetAggregMetrics() []prometheus.Collector
func (*Source) GetMetrics ¶ added in v1.7.4
func (*Source) GetMetrics() []prometheus.Collector
func (*Source) StreamingAcquisition ¶ added in v1.7.4
func (*Source) UnmarshalConfig ¶ added in v1.7.4
Click to show internal directories.
Click to hide internal directories.