sneak f519e2ca9e discriminator: the header limits are the first check (closes #311) ...

A request over 50 cookies or 100 header fields is now refused before any
other check. It causes no lookup, no query to RouteWatch, a DNS blocklist
or AbuseIPDB, no rule file match and no Core Rule Set. The rate limits no
longer count it, and a banned or denied client gets 431 for it. In observe
mode no lookup is made for it. Requests within the limits go through the
same checks in the same order.

Model: opus-5-5

2026-11-11 00:26:14 +00:00

..

abuseipdb.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

admin_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

admin.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

alerts_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

anomaly_internal_test.go

Rename the program to sww and its deciding daemon to discriminator (closes #218) (#221)

2026-11-07 06:51:06 +01:00

anomaly_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

answertime_test.go

discriminator: the header limits are the first check (closes #311)

2026-11-11 00:26:14 +00:00

bans_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

bans.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

biased_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

biased.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

blocklists.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

bytelimits_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

bytelimits.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

client.go

Rename the program to sww and its deciding daemon to discriminator (closes #218) (#221)

2026-11-07 06:51:06 +01:00

coreruleset_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

coreruleset.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

countries_test.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

countries.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

crowdsec_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

crowdsec.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

denynets.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

discriminator_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

discriminator.go

discriminator: the header limits are the first check (closes #311)

2026-11-11 00:26:14 +00:00

dnsbl.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

headerlimits.go

discriminator: the header limits are the first check (closes #311)

2026-11-11 00:26:14 +00:00

health_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

heuristics.go

discriminator: the header limits are the first check (closes #311)

2026-11-11 00:26:14 +00:00

history_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

lookup_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

lookup.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

metrics_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

observe_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

proxy_test.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

proxy.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

ratelimits_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

ratelimits.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

refusallimit_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

refusallimit.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

reputation_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

reputation.go

discriminator: each decision heuristic is its own module (closes #195)

2026-11-09 01:14:24 +01:00

request.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

requestlog_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

routewatchtags_test.go

Tests no longer connect to test servers they closed (closes #257)

2026-11-10 00:58:01 +01:00

routewatchtags.go

Add asn= and prefix= tags from a routewatch instance (closes #204)

2026-11-09 05:47:34 +01:00

rulefiles_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

rulefiles.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

staticlists_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

tagdeny_test.go

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

tagdeny.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

taglists_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

taglists.go

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

trappaths_test.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00

trappaths.go

Name request log actions so they say what they mean (closes #229)

2026-11-09 06:48:26 +01:00