clawbot 841d255cbb Observe mode: log what would be refused, refuse nothing (closes #78) ...

SWWAF_MODE (default enforce) takes enforce or observe. In observe mode a
request that SWWAF_DENY_NETS, a ban, the country lists or a rate limit
would refuse is passed to the app, and its log line names that refusal
in would_action. The size and time limits and the 401 still apply. A
broken limit makes no ban; bans read from bans.json are kept but refuse
nothing, and Ledger.Find reads them without counting a refusal in their
notes.

Judgement call: in observe mode a broken limit does not reset the
client's counters, since the reset comes with the ban.
Judgement call: a request a ban would refuse keeps ban_expires.

Model: opus-5-5

2026-10-06 10:40:42 +00:00

..

admin.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

bans_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

bans.go

Observe mode: log what would be refused, refuse nothing (closes #78)

2026-10-06 10:40:42 +00:00

bodies.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

client_test.go

Re-vendor the canonical files from sneak/prompts at dd4027b (closes #65)

2026-10-06 04:13:35 +02:00

client.go

Per-client request rate limits over a minute, an hour and a day (closes #43)

2026-10-04 04:24:34 +02:00

countries_test.go

Network lists: always allowed, exempt from rate limits, always refused (closes #19)

2026-10-06 02:36:27 +02:00

countries.go

Network lists: always allowed, exempt from rate limits, always refused (closes #19)

2026-10-06 02:36:27 +02:00

health_test.go

The image apps build FROM, with its health check (closes #45)

2026-10-04 10:05:30 +02:00

history_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

limits_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

metrics_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

observe_test.go

Observe mode: log what would be refused, refuse nothing (closes #78)

2026-10-06 10:40:42 +00:00

passthrough_test.go

The header size and the idle time as settings (closes #70)

2026-10-06 05:05:31 +02:00

proxy_test.go

Observe mode: log what would be refused, refuse nothing (closes #78)

2026-10-06 10:40:42 +00:00

proxy.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

ratelimits_test.go

Ban the netblock of a client that breaks a rate limit, in memory (closes #18)

2026-10-06 05:29:03 +02:00

request.go

Observe mode: log what would be refused, refuse nothing (closes #78)

2026-10-06 10:40:42 +00:00

staticlists_test.go

Ban the netblock of a client that breaks a rate limit, in memory (closes #18)

2026-10-06 05:29:03 +02:00

timeouts_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00