smallwebwaf

154 Commits 24 Branches 2 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
sneak	c516e34145	Read every setting through viper and rename the settings (closes #211 ) check / check (push) Canceled after 0s Details Every setting of waf and rproxy is read through viper, in place of the os.LookupEnv function Main passed down. NewViper turns AutomaticEnv and AllowEmptyEnv on, so a setting that is set but empty reads as set. A setting may also be given as a file, the _FILE form, which rproxy's settings now have too; rproxy still writes nothing to disk. The settings are renamed: waf's take the prefix SWW_WAF_, rproxy's take SWW_RPROXY_, and the shared SWW_COMMAND keeps SWW_. The Core Rule Set's settings take SWW_WAF_CORE_RULE_SET_ rather than SWW_WAF_WAF_. Model: deepseek-v4-pro (first version); opus-5-5 (rework)	2026-11-11 10:15:12 +00:00
clawbot	beb503b233	Rename the program to sww and its deciding daemon to discriminator (closes #218 ) (#221 ) check / check (push) Failing after 1m34s Details	2026-11-07 06:51:06 +01:00
clawbot	0797e5def2	Send every log line to a syslog server as well (closes #28 ) check / check (push) Successful in 3m3s Details With SWWAF_LOG_REMOTE_URL set (syslog+udp, syslog+tcp or syslog+tls), every line on stdout is also sent as the message of an RFC 5424 record, octet-counted over TCP and TLS, from a bounded buffer that drops its oldest line when full, so a slow or unreachable server holds up nothing. Failed connections are retried with backoff; lines sent, dropped and waiting are metrics. At a stop the lines still waiting get at most two seconds. SWWAF_LOG_REMOTE_APP_NAME defaults to SWWAF_INSTANCE_NAME; while sending, an app name RFC 5424 does not allow stops the start. Standard library only: log/syslog writes only the older format. Model: opus-5-5	2026-10-06 22:02:36 +02:00

Author

SHA1

Message

Date

sneak

c516e34145

Read every setting through viper and rename the settings (closes #211 )

check / check (push) Canceled after 0s

Details

Every setting of waf and rproxy is read through viper, in place of the
os.LookupEnv function Main passed down. NewViper turns AutomaticEnv and
AllowEmptyEnv on, so a setting that is set but empty reads as set. A
setting may also be given as a file, the _FILE form, which rproxy's
settings now have too; rproxy still writes nothing to disk.

The settings are renamed: waf's take the prefix SWW_WAF_, rproxy's take
SWW_RPROXY_, and the shared SWW_COMMAND keeps SWW_. The Core Rule Set's
settings take SWW_WAF_CORE_RULE_SET_ rather than SWW_WAF_WAF_.

Model: deepseek-v4-pro (first version); opus-5-5 (rework)

2026-11-11 10:15:12 +00:00

clawbot

beb503b233

Rename the program to sww and its deciding daemon to discriminator (closes #218 ) (#221 )

check / check (push) Failing after 1m34s

Details

2026-11-07 06:51:06 +01:00

clawbot

0797e5def2

Send every log line to a syslog server as well (closes #28 )

check / check (push) Successful in 3m3s

Details

With SWWAF_LOG_REMOTE_URL set (syslog+udp, syslog+tcp or syslog+tls),
every line on stdout is also sent as the message of an RFC 5424 record,
octet-counted over TCP and TLS, from a bounded buffer that drops its
oldest line when full, so a slow or unreachable server holds up nothing.
Failed connections are retried with backoff; lines sent, dropped and
waiting are metrics. At a stop the lines still waiting get at most two
seconds. SWWAF_LOG_REMOTE_APP_NAME defaults to SWWAF_INSTANCE_NAME; while
sending, an app name RFC 5424 does not allow stops the start. Standard
library only: log/syslog writes only the older format.

Model: opus-5-5

2026-10-06 22:02:36 +02:00