Commit Graph

100 Commits

Author SHA1 Message Date
Granyaa
3964ea1a3d Add delayed verdict support for response body in nano attachment
Summary:
* Implement TRAFFIC_VERDICT_DELAYED handling in SendResponseBody function * Add delayed verdict thread spawning when response body returns delayed verdict This change mirrors the existing delayed verdict handling in SendRequestBody to ensure consistent behavior for both request and response body processing.
2025-12-23 10:48:52 +02:00
wiaamm
d723e297d1 revert to correct value 2025-12-15 14:40:10 +02:00
wiaam-mhameed
f778b851c1 Fix kong response body (#49)
* fix large response body

* fix large response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix specific path

* return correct path

* fresh start

* fix send_bodu in lua_attachment_wrapper.c

* change branch

* add timeout

* add timeout

* remove the header filter

* try chunk hashing

* proper fini session

* add more check

* try setting last chunk

* remove finilizing session

* return to basic version

* proper fini of session data

* add some check for internal traffic

* envoy functionality...

* proper fini session

* proper fini session

* fini session on accept also

* for testing change the log level

* remove fini session from header

* remove fini session from header

* remove fini session from header

* remove inpect check

* fix wrong close statement

* correct inspection_complete handling

* fix oom

* fix oom

* fix oom

* fix oom

* fix oom

* fix init attachment

* nano_ffi free memoty

* GC implementation

* optimize

* clean

* increase timeout

* increase timeout

* using is_session_fini, the commit before this one is working ...

* returning to last working version ...

* just for testing

* fix block page

* fix block page

* fix block page

* fix block page

* fix block page

* fix fini session

* add collect(stop)

* return to default

* fix oom caused by using freed values

* fix oom caused by using freed values

* add large response body handling

* implement timeout

* implement timeout

* remove GC

* testing

* add end_inspection

* remove comments

* ngx.arg[1] = nil

* Skip inspection for health checks and internal requests

* add new flag for bypass inspections

* move ngx.arg[1] to the beginning

* try without coolectgarbage

* remove internal traffic check

* remove internal traffic check

* I don't know

* I don't know

* try add chunk assignment

* check why data session is nil in header but availablein body

* remove end inspection

* remove logs

* ctx.timeout_passthrough

* remove ctx.timeout_passthrough

* add GC

* remove the logs

* return the logs

* last modification....

* add logs

* revert to working version

* remove stupid cat

* fini_session only in log phase

* last try

* remove processed_requests

* remove unused variable

* remove nano_ffi changes

* add debuging message for testing

* get worker workers inside the init_attachmetn

* test now

* move check

* add accept

* add accept

* remove endinspection

* fix typo

* get req body in chunks

* test body chunks:

* add timeout in req body

* fixing

* add logs for test

* fix accept verdic in body_filter

* add more logs

* fix ngx time

* add more logs

* add getter functions for timeout

* add more logs

* ready for review

* use right content-length

* add missing content-length update

* try content-length nil

* add nil to header filter

* revert shcema changes

* try exit in header filter

* try content-length nil

* remove the test

* refuse connection when prevnet occures in response body

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-12-15 13:51:44 +02:00
avigailo
1ed86d4cee fix attachment web response enum (#48) 2025-11-24 14:38:11 +02:00
wiaam-mhameed
bc5a88f4fd Change path (#47)
* fix specific path

* fix specific path

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-11-20 15:04:48 +02:00
wiaamm
74959bf32b return correct path 2025-11-09 16:02:06 +02:00
wiaamm
c76bdfdb62 fix relative path 2025-11-09 14:20:49 +02:00
wiaam-mhameed
1d7ee4c2d0 fixing multi headers valus issue in kong (#46)
* fixing multi headers valus issue in kong

* fixing multi headers valus issue in kong

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-10-21 16:57:10 +03:00
Daniel-Eisenberg
30b19505ce Fix alpine ca (#45)
* add attachment load script

* update file path

* update file path

* update file path

---------

Co-authored-by: Daniel Eisenberg <danielei@checkpoint.com>
2025-09-30 18:19:54 +03:00
Daniel-Eisenberg
31543864d9 Update envoy version (#44)
* add envoy 1.34

* Update build_template

test

* Create go.mod

* Update build_template

---------

Co-authored-by: Daniel Eisenberg <danielei@checkpoint.com>
2025-08-19 17:24:00 +03:00
Daniel-Eisenberg
a5db1bbbc6 sync code (#43)
Co-authored-by: Ned Wright <nedwright@proton.me>
2025-08-10 13:23:10 +03:00
wiaam-mhameed
6154961b0b Add kong gateway (#42)
* add gateway

* fix right command

* fix CMakeLists

* add uzip package

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-07-29 09:44:19 +03:00
Daniel-Eisenberg
4667ec899a Update Dockerfile 2025-07-27 18:46:09 +03:00
Daniel-Eisenberg
9efe08370d Update schema.lua 2025-07-24 18:15:26 +03:00
Daniel Eisenberg
10a0a440b6 add query params 2025-07-10 17:15:01 +03:00
Daniel Eisenberg
81bbf17df3 include cereal in kong plugin 2025-07-10 12:41:53 +03:00
Daniel-Eisenberg
5b2920fc67 change kong plugin path (#41)
Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-07-08 16:14:04 +03:00
Daniel-Eisenberg
5ee4902e43 Fix k8s crash (#40)
* fix k8s crashes

* change bransh

* fix the docker build command

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-07-07 16:49:25 +03:00
Daniel-Eisenberg
5d243ffbc9 Kong fail open (#39)
* fix large file inspection and free memory

* remove duplicated function

* fix cleanup calls

* return the old functionality

* send the all the body

* fix cleanup

* remove debug messages

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-07-06 17:16:14 +03:00
Daniel-Eisenberg
479f605800 Kong k8s (#38)
* make the webhook generic

* add service account

* change variable name

* remove the comments

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-07-02 16:37:09 +03:00
Daniel-Eisenberg
c59e4d0e76 Kong dockerfile (#37)
* add the kong plugin Dockerfile

* fix version

* fix version

* Daniel fixes

* [JIRA] INXT-46346: Kong plug in | Prepare for docker submission

* Docker file fix

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* [JIRA] INXT-46285: Kong plug In | add flag to open-appsec script

* fix docker

* fix docker

* fix

* add network hos

* remove build.sh files

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-06-30 16:46:53 +03:00
Daniel-Eisenberg
882dc4c187 Add kong plugin (#36)
* add kong plugin to open-appsec

* fix url in rockspec file

* add the attachment prefix to the paths

* check

* fix branch

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-06-24 14:58:41 +03:00
Daniel-Eisenberg
8f459a139b add waf tag changes to openappsec (#35)
Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-06-11 11:35:13 +03:00
wiaam96
22852d8428 Update istio (#34)
* update istio

* update istio

* fixing istio

* fix library name

* fix library name

* fix missing defenition of advanced-model

* fix append

* fix wrong name

* fix pvc issue

* fix config.go file

* fix config.go file

* fix config.go file

* fix config.go file

---------

Co-authored-by: Daniel Eisenberg <danielei@checkpoint.com>
2025-06-04 18:15:16 +03:00
wiaam96
83fccba6a5 Add tuning (#33)
* add all tuning fields

* adding volume mounts
2025-02-24 16:30:12 +02:00
Daniel-Eisenberg
c5eef44c68 Merge pull request #32 from openappsec/nano-blockpage
fix nano block page
2025-02-17 10:59:17 +02:00
Daniel Eisenberg
46c1bf1c50 fix openappsec block page 2025-02-16 16:06:43 +02:00
Daniel-Eisenberg
d9fe74c2cd Merge pull request #31 from openappsec/Feb_10_2025-Dev
Feb 10 2025 dev
2025-02-12 10:57:49 +02:00
wiaam96
23dbf06cd0 Istio support (#30)
* adding istio files

* fix the envoy CMakList file

* fix the envoy CMakList file

* adding the .mod file

* adding the webhook injector image

* adding istio files

* adding istio files

* fix the envoy CMakList file

* fix the envoy CMakList file

* adding the .mod file

* adding the webhook injector image

* adding istio files

* pulling from dev

* fix the envoy CMakList file

* adding istio files

* fix missing header

* fix wrong name of library

* fix envoy CMakeLists

* remove cloud guard names

* remove cloud guard names

* adding istio files

* adding istio files

* [JIRA] INXT-44274: test agent image

* add Daniel fixes

* remove zlib library

* remove nano attachment ut
2025-02-11 12:01:51 +02:00
Ned Wright
26e2a38713 sync code 2025-02-10 16:27:27 +00:00
Daniel-Eisenberg
3c614f385a Merge pull request #28 from openappsec/Dec_29_2024-Dev
sync code
2025-01-02 10:57:29 +02:00
Ned Wright
c72a54546c sync code 2024-12-29 12:27:22 +00:00
Daniel-Eisenberg
711bf5686a Merge pull request #27 from openappsec/Nov_28_2024-Dev
code sync
2024-12-01 11:52:08 +02:00
Ned Wright
d040d8ed3d code sync 2024-11-28 08:32:41 +00:00
Daniel-Eisenberg
6a86b028fb Merge pull request #26 from openappsec/Sep_17_2024-Dev
code sync
2024-09-30 14:52:56 +03:00
Ned Wright
e9223aaed6 code sync 2024-09-17 11:03:29 +00:00
WrightNed
844ef98fdc Merge pull request #23 from openappsec/Jul_23_2024-Dev
Jul 23rd update
2024-07-24 16:04:46 +03:00
Ned Wright
0ba243d5c0 Jul 23rd update 2024-07-23 11:00:05 +00:00
WrightNed
7b5683e4b0 Merge pull request #21 from openappsec/Jun_26_2024-Dev
June 27th update
2024-07-01 11:43:08 +03:00
Ned Wright
b17f61dc40 June 27th update 2024-06-27 12:08:34 +00:00
WrightNed
16a4771305 Merge pull request #20 from openappsec/May_27_2024-Dev
May 27 update
2024-06-02 10:16:08 +03:00
Ned Wright
700c5ef611 May 27 update 2024-05-27 08:43:44 +00:00
WrightNed
0e2a4b74fc Merge pull request #19 from openappsec/Apr_21_2024-Dev
April 21th 2024 update
2024-05-19 11:08:39 +03:00
Ned Wright
a6300bf2da April 21th 2024 update 2024-04-21 12:25:05 +00:00
WrightNed
cc6383b6c1 Merge pull request #17 from openappsec/Apr_14_2024-Dev
2024 April 14th update
2024-04-17 12:41:22 +03:00
Ned Wright
74fb210b2f 2024 April 14th update 2024-04-14 14:35:06 +00:00
WrightNed
9276d4c818 Merge pull request #15 from openappsec/Jan_31_2024-Dev
Jan_31_2024-Dev
2024-02-04 15:47:29 +02:00
Ned Wright
fcc3e9ad40 Jan_31_2024-Dev 2024-01-31 17:52:50 +00:00
Ned Wright
bf4b0f5a26 Add missing space 2023-12-28 10:29:25 +00:00
orianelou
ec0c9bc832 Merge pull request #14 from openappsec/readme-update
Update README.md
2023-12-25 10:52:32 +02:00