sneak a959df50ad servewaf always answers rproxy well within its time limit (closes #182) ...

A question waits on GeoJS at most 800ms, the new default of
SWWAF_LOOKUP_TIMEOUT. It does not wait at all when the checks will refuse
it whatever GeoJS answers. Just before the Core Rule Set, servewaf refuses
more than 50 cookies or 100 header fields with 431.

Shared default changed: SWWAF_LOOKUP_TIMEOUT also applies to smallwebwaf
with no command.
Judgement call: SWWAF_REPUTATION_TIMEOUT stays 2s, since no request waits
on the DNS blocklists or AbuseIPDB.

Model: opus-5-5

2026-11-05 03:15:00 +00:00

..

admin_test.go

Ban notes name the reputation sources that listed the client (closes #109)

2026-10-08 03:08:01 +02:00

admin.go

servewaf answers rproxy's question about each request and takes its report (closes #170)

2026-11-05 00:32:08 +01:00

alerts_test.go

Ban notes name the reputation sources that listed the client (closes #109)

2026-10-08 03:08:01 +02:00

anomaly_internal_test.go

servewaf answers rproxy's question about each request and takes its report (closes #170)

2026-11-05 00:32:08 +01:00

anomaly_test.go

Anomaly thresholds: alerts for unusual traffic, nothing refused (closes #101)

2026-10-07 16:12:19 +02:00

answertime_test.go

servewaf always answers rproxy well within its time limit (closes #182)

2026-11-05 03:15:00 +00:00

bans_test.go

servewaf answers rproxy's question about each request and takes its report (closes #170)

2026-11-05 00:32:08 +01:00

bans.go

servewaf answers rproxy's question about each request and takes its report (closes #170)

2026-11-05 00:32:08 +01:00

biased_test.go

servewaf always answers rproxy well within its time limit (closes #182)

2026-11-05 03:15:00 +00:00

biased.go

AbuseIPDB scores for clients that committed an offence, within a daily budget (closes #105)

2026-10-07 22:47:06 +02:00

bodies.go

An upgrade the app accepts under another protocol name is answered 502 (closes #131)

2026-10-20 15:36:30 +02:00

bytelimits_test.go

The Core Rule Set, run by Coraza, on each request's method, URL and headers (closes #25)

2026-10-08 09:37:13 +02:00

client_test.go

Log the rest of the request log's fields (closes #79)

2026-10-06 17:26:21 +02:00

client.go

Read SWWAF_IPV6_GROUP_PREFIX, SWWAF_MAX_TRACKED_CLIENTS and SWWAF_LOG_LEVEL (closes #112)

2026-10-08 02:14:12 +02:00

coreruleset_test.go

Core Rule Set reads request bodies up to SWWAF_WAF_BODY_LIMIT (closes #116)

2026-10-08 12:59:13 +02:00

coreruleset.go

servewaf answers rproxy's question about each request and takes its report (closes #170)

2026-11-05 00:32:08 +01:00

countries_test.go

servewaf always answers rproxy well within its time limit (closes #182)

2026-11-05 03:15:00 +00:00

countries.go

AS number and country looked up for every client (closes #95)

2026-10-07 08:46:01 +02:00

crowdsec_test.go

CrowdSec decision list fetched, kept, and its clients banned until the decision ends (closes #106)

2026-10-08 05:15:06 +02:00

errorburst_test.go

The Core Rule Set, run by Coraza, on each request's method, URL and headers (closes #25)

2026-10-08 09:37:13 +02:00

health_test.go

Log the rest of the request log's fields (closes #79)

2026-10-06 17:26:21 +02:00

history_test.go

Tests that need a lookup answer give it an hour (closes #119)

2026-10-08 08:14:45 +02:00

limits_test.go

Serve Prometheus metrics behind SWWAF_METRICS_TOKEN (closes #23)

2026-10-06 11:40:27 +02:00

lookup_test.go

servewaf always answers rproxy well within its time limit (closes #182)

2026-11-05 03:15:00 +00:00

lookup.go

servewaf always answers rproxy well within its time limit (closes #182)

2026-11-05 03:15:00 +00:00

metrics_test.go

servewaf always answers rproxy well within its time limit (closes #182)

2026-11-05 03:15:00 +00:00

observe_test.go

Tests that need a lookup answer give it an hour (closes #119)

2026-10-08 08:14:45 +02:00

passthrough_test.go

An answer from the app without a Content-Type reaches the client without one (closes #127)

2026-10-20 16:41:18 +02:00

proxy_test.go

servewaf answers rproxy's question about each request and takes its report (closes #170)

2026-11-05 00:32:08 +01:00

proxy.go

servewaf answers rproxy's question about each request and takes its report (closes #170)

2026-11-05 00:32:08 +01:00

ratelimits_test.go

A path holding a character Go escapes reaches the app as the client sent it (closes #126)

2026-10-20 16:09:46 +02:00

reputation_test.go

The Core Rule Set, run by Coraza, on each request's method, URL and headers (closes #25)

2026-10-08 09:37:13 +02:00

reputation.go

servewaf answers rproxy's question about each request and takes its report (closes #170)

2026-11-05 00:32:08 +01:00

request_internal_test.go

An answer from the app without a Content-Type reaches the client without one (closes #127)

2026-10-20 16:41:18 +02:00

request.go

servewaf always answers rproxy well within its time limit (closes #182)

2026-11-05 03:15:00 +00:00

requestlog_test.go

Byte limits per client over a minute, an hour and a day (closes #20)

2026-10-07 13:13:06 +02:00

rulefiles_test.go

Trap paths, and the error burst banning a client refused too often (closes #115)

2026-10-08 06:44:55 +02:00

rules.go

Path rules and trap paths match the path decoded once too (closes #85)

2026-10-14 18:20:31 +02:00

servewaf_test.go

servewaf answers rproxy's question about each request and takes its report (closes #170)

2026-11-05 00:32:08 +01:00

servewaf.go

servewaf always answers rproxy well within its time limit (closes #182)

2026-11-05 03:15:00 +00:00

staticlists_test.go

Tests that need a lookup answer give it an hour (closes #119)

2026-10-08 08:14:45 +02:00

timeouts_test.go

A client that stops sending with little of its body left after the app has answered is timed out (closes #136)

2026-10-20 15:09:16 +02:00

trappaths_test.go

Path rules and trap paths match the path decoded once too (closes #85)

2026-10-14 18:20:31 +02:00