'discriminator' is now 'waf' everywhere. 'rproxy' and 'waf' are the two modes. the binary is now 'sww', so 'sww rproxy' and 'sww waf'.
don't get too down in the weeds on the per-app stuff before we have a working version that passes traffic as a 1.0 beta. we can start tuning the rules more later, it can start permissive (it's…
there need to be basic sanity tests in the discriminator very early in the chain
why does it take so long? 16000 cookies should be instant fail, no?
it doesn't just fetch it, though. still a bad name! "commit-current-upstream-policy-docs" makes sense. you can probably think of others. why are you choosing short obfuscated identifiers as if…
this is so unimportant, why are you working on this instead of 1.0 blockers?
definition of done is that go install -v sneak.berlin/go/sfdupes/cmd/sfdupes@latest works to install main.
also an error log sqlite file that tracks our own errors, 7d or 100k lines whichever is smaller. things like ipabusedb or geoip or routewatch backend timeouts, missed response to rproxy deadlines,…