Commit Graph

49 Commits

Author SHA1 Message Date
Granyaa
7884c711e2 Refactor delayed verdict handling and add configurable retries
Extract HandleDelayedVerdict() to eliminate duplication and make
retry count and polling time configurable. Add delayed verdict
handling to SendRequestEnd with unit tests.
2025-12-23 16:01:46 +02:00
Gray
565adf10a1 Add delayed verdict support for response end in nano attachment Summary: (#51)
* Implement TRAFFIC_VERDICT_DELAYED handling in SendResponseEndfunction
* Add delayed verdict thread spawning when response end returns delayed verdict

This change mirrors the existing delayed verdict handling in SendRequestBody and SendResponseBody to ensure consistent behavior for both request and response body processing.
2025-12-23 13:43:31 +02:00
Gray
41e13b1bba Feature/nano attachment delayed verdict response body (#50)
* Add delayed verdict support for response body in nano attachment
Summary:
* Implement TRAFFIC_VERDICT_DELAYED handling in SendResponseBody function * Add delayed verdict thread spawning when response body returns delayed verdict This change mirrors the existing delayed verdict handling in SendRequestBody to ensure consistent behavior for both request and response body processing.

* Redirect kong nano attachment output from stdout to stderr
2025-12-23 11:23:14 +02:00
wiaamm
d723e297d1 revert to correct value 2025-12-15 14:40:10 +02:00
wiaam-mhameed
f778b851c1 Fix kong response body (#49)
* fix large response body

* fix large response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix response body

* fix specific path

* return correct path

* fresh start

* fix send_bodu in lua_attachment_wrapper.c

* change branch

* add timeout

* add timeout

* remove the header filter

* try chunk hashing

* proper fini session

* add more check

* try setting last chunk

* remove finilizing session

* return to basic version

* proper fini of session data

* add some check for internal traffic

* envoy functionality...

* proper fini session

* proper fini session

* fini session on accept also

* for testing change the log level

* remove fini session from header

* remove fini session from header

* remove fini session from header

* remove inpect check

* fix wrong close statement

* correct inspection_complete handling

* fix oom

* fix oom

* fix oom

* fix oom

* fix oom

* fix init attachment

* nano_ffi free memoty

* GC implementation

* optimize

* clean

* increase timeout

* increase timeout

* using is_session_fini, the commit before this one is working ...

* returning to last working version ...

* just for testing

* fix block page

* fix block page

* fix block page

* fix block page

* fix block page

* fix fini session

* add collect(stop)

* return to default

* fix oom caused by using freed values

* fix oom caused by using freed values

* add large response body handling

* implement timeout

* implement timeout

* remove GC

* testing

* add end_inspection

* remove comments

* ngx.arg[1] = nil

* Skip inspection for health checks and internal requests

* add new flag for bypass inspections

* move ngx.arg[1] to the beginning

* try without coolectgarbage

* remove internal traffic check

* remove internal traffic check

* I don't know

* I don't know

* try add chunk assignment

* check why data session is nil in header but availablein body

* remove end inspection

* remove logs

* ctx.timeout_passthrough

* remove ctx.timeout_passthrough

* add GC

* remove the logs

* return the logs

* last modification....

* add logs

* revert to working version

* remove stupid cat

* fini_session only in log phase

* last try

* remove processed_requests

* remove unused variable

* remove nano_ffi changes

* add debuging message for testing

* get worker workers inside the init_attachmetn

* test now

* move check

* add accept

* add accept

* remove endinspection

* fix typo

* get req body in chunks

* test body chunks:

* add timeout in req body

* fixing

* add logs for test

* fix accept verdic in body_filter

* add more logs

* fix ngx time

* add more logs

* add getter functions for timeout

* add more logs

* ready for review

* use right content-length

* add missing content-length update

* try content-length nil

* add nil to header filter

* revert shcema changes

* try exit in header filter

* try content-length nil

* remove the test

* refuse connection when prevnet occures in response body

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-12-15 13:51:44 +02:00
wiaam-mhameed
bc5a88f4fd Change path (#47)
* fix specific path

* fix specific path

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-11-20 15:04:48 +02:00
wiaamm
74959bf32b return correct path 2025-11-09 16:02:06 +02:00
wiaamm
c76bdfdb62 fix relative path 2025-11-09 14:20:49 +02:00
wiaam-mhameed
1d7ee4c2d0 fixing multi headers valus issue in kong (#46)
* fixing multi headers valus issue in kong

* fixing multi headers valus issue in kong

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-10-21 16:57:10 +03:00
Daniel-Eisenberg
31543864d9 Update envoy version (#44)
* add envoy 1.34

* Update build_template

test

* Create go.mod

* Update build_template

---------

Co-authored-by: Daniel Eisenberg <danielei@checkpoint.com>
2025-08-19 17:24:00 +03:00
Daniel-Eisenberg
a5db1bbbc6 sync code (#43)
Co-authored-by: Ned Wright <nedwright@proton.me>
2025-08-10 13:23:10 +03:00
Daniel-Eisenberg
9efe08370d Update schema.lua 2025-07-24 18:15:26 +03:00
Daniel Eisenberg
10a0a440b6 add query params 2025-07-10 17:15:01 +03:00
Daniel Eisenberg
81bbf17df3 include cereal in kong plugin 2025-07-10 12:41:53 +03:00
Daniel-Eisenberg
5b2920fc67 change kong plugin path (#41)
Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-07-08 16:14:04 +03:00
Daniel-Eisenberg
5ee4902e43 Fix k8s crash (#40)
* fix k8s crashes

* change bransh

* fix the docker build command

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-07-07 16:49:25 +03:00
Daniel-Eisenberg
5d243ffbc9 Kong fail open (#39)
* fix large file inspection and free memory

* remove duplicated function

* fix cleanup calls

* return the old functionality

* send the all the body

* fix cleanup

* remove debug messages

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-07-06 17:16:14 +03:00
Daniel-Eisenberg
c59e4d0e76 Kong dockerfile (#37)
* add the kong plugin Dockerfile

* fix version

* fix version

* Daniel fixes

* [JIRA] INXT-46346: Kong plug in | Prepare for docker submission

* Docker file fix

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* fix the docker build command

* [JIRA] INXT-46285: Kong plug In | add flag to open-appsec script

* fix docker

* fix docker

* fix

* add network hos

* remove build.sh files

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-06-30 16:46:53 +03:00
Daniel-Eisenberg
882dc4c187 Add kong plugin (#36)
* add kong plugin to open-appsec

* fix url in rockspec file

* add the attachment prefix to the paths

* check

* fix branch

---------

Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-06-24 14:58:41 +03:00
Daniel-Eisenberg
8f459a139b add waf tag changes to openappsec (#35)
Co-authored-by: wiaamm <wiaamm@checkpoint.com>
2025-06-11 11:35:13 +03:00
wiaam96
22852d8428 Update istio (#34)
* update istio

* update istio

* fixing istio

* fix library name

* fix library name

* fix missing defenition of advanced-model

* fix append

* fix wrong name

* fix pvc issue

* fix config.go file

* fix config.go file

* fix config.go file

* fix config.go file

---------

Co-authored-by: Daniel Eisenberg <danielei@checkpoint.com>
2025-06-04 18:15:16 +03:00
Daniel Eisenberg
46c1bf1c50 fix openappsec block page 2025-02-16 16:06:43 +02:00
wiaam96
23dbf06cd0 Istio support (#30)
* adding istio files

* fix the envoy CMakList file

* fix the envoy CMakList file

* adding the .mod file

* adding the webhook injector image

* adding istio files

* adding istio files

* fix the envoy CMakList file

* fix the envoy CMakList file

* adding the .mod file

* adding the webhook injector image

* adding istio files

* pulling from dev

* fix the envoy CMakList file

* adding istio files

* fix missing header

* fix wrong name of library

* fix envoy CMakeLists

* remove cloud guard names

* remove cloud guard names

* adding istio files

* adding istio files

* [JIRA] INXT-44274: test agent image

* add Daniel fixes

* remove zlib library

* remove nano attachment ut
2025-02-11 12:01:51 +02:00
Ned Wright
26e2a38713 sync code 2025-02-10 16:27:27 +00:00
Ned Wright
c72a54546c sync code 2024-12-29 12:27:22 +00:00
Ned Wright
d040d8ed3d code sync 2024-11-28 08:32:41 +00:00
Ned Wright
e9223aaed6 code sync 2024-09-17 11:03:29 +00:00
Ned Wright
0ba243d5c0 Jul 23rd update 2024-07-23 11:00:05 +00:00
Ned Wright
b17f61dc40 June 27th update 2024-06-27 12:08:34 +00:00
Ned Wright
700c5ef611 May 27 update 2024-05-27 08:43:44 +00:00
Ned Wright
a6300bf2da April 21th 2024 update 2024-04-21 12:25:05 +00:00
Ned Wright
74fb210b2f 2024 April 14th update 2024-04-14 14:35:06 +00:00
Ned Wright
fcc3e9ad40 Jan_31_2024-Dev 2024-01-31 17:52:50 +00:00
Ned Wright
b4d92d54ac Nov_12_2023-Dev 2023-11-12 18:51:30 +00:00
Ned Wright
9ac186f483 Aug_23_2023-Dev 2023-08-23 14:40:32 +00:00
Ned Wright
e8edd6cfbe Fix configuration script 2023-07-06 00:59:55 +00:00
Ned Wright
248bc2e5f3 Restore block page 2023-07-05 18:04:32 +00:00
Ned Wright
3da1f451e7 Jul 5th update 2023-07-05 17:52:42 +00:00
Ned Wright
7d19b899e9 Adding packaging option to attachemnt 2023-06-27 14:49:26 +00:00
Ned Wright
3c575fe73b Mar 26th 2023 Dev 2023-03-27 15:07:44 +00:00
Ned Wright
d1192f98fe Feb 15th 2023 update 2023-02-15 19:16:59 +00:00
Ned Wright
92a3a8daea Kong support 2023-02-06 19:17:03 +00:00
Ned Wright
5e42c65c03 Updating docker script 2023-02-06 16:44:20 +00:00
Ned Wright
b02562445f Jun 16th update 2023-01-17 10:50:22 +00:00
dgambarin
486253b198 Add error handling to nginx_version_configuration.sh 2022-12-28 08:21:05 +02:00
dgambarin
4f16daedad replace infi logo to open appsec 2022-10-26 14:25:48 +00:00
dgambarin
e118de8bc1 replace infi logo to open appsec 2022-10-26 13:56:53 +00:00
Ned Wright
3703b14ba6 Add docket support 2022-10-25 14:45:02 +00:00
noam
7e8e141c53 Uploading attachment code 2022-06-29 21:50:10 +03:00