Debian
bf16ce6666
feat(waf): Phase 3 — HAProxy SPOE-Integration — v1.2.68
- haproxy.cfg.tpl: filter spoe + deny_status 403 + spoe-edgeguard-waf
Backend (nur gerendert wenn WAFEnabled=true)
- haproxy.go: WAFEnabled in View; WafRepo.ListEnabled() prüft ob WAF
aktiv; SPOE-Config-File (coraza-spoe.cfg) wird bei WAFEnabled
atomar geschrieben; SPOEConfigPath konfigurierbar
- waf/spoe.go: uri statt path+query (HAProxy url-Sample = volle URI)
SPOE-Config definiert:
- Agent: edgeguard-waf-agent, var-prefix=waf, timeout processing 50ms
- Message: src, method, uri=url, ver=req.ver, headers=req.hdrs,
host=req.hdr(host)
- Backend: spoe-edgeguard-waf → 127.0.0.1:9000
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-02 15:53:07 +02:00
..
2026-05-31 18:18:31 +02:00
2026-05-25 06:28:48 +02:00
2026-05-31 18:18:31 +02:00
2026-05-08 18:45:41 +02:00
2026-05-11 06:32:59 +02:00
2026-06-02 09:09:39 +02:00
2026-06-02 15:28:29 +02:00
2026-06-01 20:25:48 +02:00
2026-06-02 15:28:29 +02:00
2026-06-02 15:53:07 +02:00
2026-05-31 18:18:31 +02:00
2026-05-28 15:03:16 +02:00
2026-06-02 15:28:29 +02:00
2026-05-08 18:45:41 +02:00
2026-06-02 15:43:15 +02:00
2026-05-31 18:18:31 +02:00
2026-05-31 18:18:31 +02:00
2026-06-02 15:53:07 +02:00
2026-05-31 18:18:31 +02:00