sneak 69f45f944f discriminator: the header limits are the first check (closes #311) ...

A request over 50 cookies or 100 header fields is now refused by the first
check after SWW_ALLOW_NETS. It causes no lookup, no query to RouteWatch, a DNS
blocklist or AbuseIPDB, no rule file match and no Core Rule Set. The rate
limits no longer count it, and a banned or denied client gets 431 for it. It
makes no ban, makes no ban permanent and is not counted in a ban's notes. In
observe mode no lookup is made for it. Requests within the limits go through
the same checks in the same order.

Model: opus-5-5

2026-11-11 01:14:57 +00:00

..

abuseipdb.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

admin_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

admin.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

alerts_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

anomaly_internal_test.go

Rename the program to sww and its deciding daemon to discriminator (closes #218) (#221)

2026-11-07 06:51:06 +01:00

anomaly_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

answertime_test.go

discriminator: the header limits are the first check (closes #311)

2026-11-11 01:14:57 +00:00

bans_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

bans.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

biased_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

biased.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

blocklists.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

bytelimits_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

bytelimits.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

client.go

Rename the program to sww and its deciding daemon to discriminator (closes #218) (#221)

2026-11-07 06:51:06 +01:00

coreruleset_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

coreruleset.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

countries_test.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

countries.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

crowdsec_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

crowdsec.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

denynets.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

discriminator_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

discriminator.go

discriminator: the header limits are the first check (closes #311)

2026-11-11 01:14:57 +00:00

dnsbl.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

headerlimits.go

discriminator: the header limits are the first check (closes #311)

2026-11-11 01:14:57 +00:00

health_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

heuristics.go

discriminator: the header limits are the first check (closes #311)

2026-11-11 01:14:57 +00:00

history_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

lookup_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

lookup.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

metrics_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

observe_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

proxy_test.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

proxy.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

ratelimits_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

ratelimits.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

refusallimit_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

refusallimit.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

reputation_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

reputation.go

discriminator: each decision heuristic is its own module (closes #195)

2026-11-09 01:14:24 +01:00

request.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

requestlog_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

routewatchtags_test.go

Tests no longer connect to test servers they closed (closes #257)

2026-11-10 00:58:01 +01:00

routewatchtags.go

Add asn= and prefix= tags from a routewatch instance (closes #204)

2026-11-09 05:47:34 +01:00

rulefiles_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

rulefiles.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

staticlists_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

tagdeny_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

tagdeny.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

taglists_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

taglists.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

trappaths_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

trappaths.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00