clawbot 2421cdc273 Lower limits for listed AS numbers and countries (closes #21) ...

SWWAF_ASN_LIMIT_PERCENT and SWWAF_COUNTRY_LIMIT_PERCENT give the clients
of the AS numbers and countries they list that percentage of every rate
and byte limit, rounded down; SWWAF_ASN_BYTES_PERCENT and
SWWAF_COUNTRY_BYTES_PERCENT take its place for the byte limits of those
they list; SWWAF_UNKNOWN_LIMIT_PERCENT (100) covers clients without a
country. The lowest applies. While one lowers a limit, a request waits
for its client's lookup, and SWWAF_LOOKUP_SOURCE=off stops the start. Log
lines give limit_percent and bytes_percent with their settings; ban
notes, and so alerts, give the broken limit's.

Judgement call: a client without a country is unknown, whatever its AS number.
Judgement call: bytes_percent and its setting are log fields SPEC does not name.
Rule suppressed: funlen on FromEnvironment, one line per setting.

Model: opus-5-5

2026-10-07 14:22:01 +02:00

..

admin_test.go

Admin endpoints for bans and clients on the single listener (closes #27)

2026-10-07 01:13:16 +02:00

admin.go

Admin endpoints for bans and clients on the single listener (closes #27)

2026-10-07 01:13:16 +02:00

alerts_test.go

Byte limits per client over a minute, an hour and a day (closes #20)

2026-10-07 13:13:06 +02:00

bans_test.go

Byte limits per client over a minute, an hour and a day (closes #20)

2026-10-07 13:13:06 +02:00

bans.go

Lower limits for listed AS numbers and countries (closes #21)

2026-10-07 14:22:01 +02:00

biased_test.go

Lower limits for listed AS numbers and countries (closes #21)

2026-10-07 14:22:01 +02:00

biased.go

Lower limits for listed AS numbers and countries (closes #21)

2026-10-07 14:22:01 +02:00

bodies.go

Byte limits per client over a minute, an hour and a day (closes #20)

2026-10-07 13:13:06 +02:00

bytelimits_test.go

Byte limits per client over a minute, an hour and a day (closes #20)

2026-10-07 13:13:06 +02:00

client_test.go

Log the rest of the request log's fields (closes #79)

2026-10-06 17:26:21 +02:00

client.go

Log the rest of the request log's fields (closes #79)

2026-10-06 17:26:21 +02:00

countries_test.go

AS number and country looked up for every client (closes #95)

2026-10-07 08:46:01 +02:00

countries.go

AS number and country looked up for every client (closes #95)

2026-10-07 08:46:01 +02:00

health_test.go

Log the rest of the request log's fields (closes #79)

2026-10-06 17:26:21 +02:00

history_test.go

AS number and country looked up for every client (closes #95)

2026-10-07 08:46:01 +02:00

limits_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

lookup_test.go

Lower limits for listed AS numbers and countries (closes #21)

2026-10-07 14:22:01 +02:00

lookup.go

Lower limits for listed AS numbers and countries (closes #21)

2026-10-07 14:22:01 +02:00

metrics_test.go

Byte limits per client over a minute, an hour and a day (closes #20)

2026-10-07 13:13:06 +02:00

observe_test.go

Bans an admin makes or lifts: the admin cause, a reason, lifted bans kept (closes #86)

2026-10-06 23:09:52 +02:00

passthrough_test.go

Byte limits per client over a minute, an hour and a day (closes #20)

2026-10-07 13:13:06 +02:00

proxy_test.go

Lower limits for listed AS numbers and countries (closes #21)

2026-10-07 14:22:01 +02:00

proxy.go

Lower limits for listed AS numbers and countries (closes #21)

2026-10-07 14:22:01 +02:00

ratelimits_test.go

AS number and country looked up for every client (closes #95)

2026-10-07 08:46:01 +02:00

request.go

Lower limits for listed AS numbers and countries (closes #21)

2026-10-07 14:22:01 +02:00

requestlog_test.go

Byte limits per client over a minute, an hour and a day (closes #20)

2026-10-07 13:13:06 +02:00

rulefiles_test.go

Instance name on process log lines and every metric (closes #91)

2026-10-07 06:48:09 +02:00

rules.go

Alerts to a JSON webhook, with a cooldown and an hourly summary (closes #26)

2026-10-07 04:21:24 +02:00

staticlists_test.go

Ban the netblock of a client that breaks a rate limit, in memory (closes #18)

2026-10-06 05:29:03 +02:00

timeouts_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00