-
Notifications
You must be signed in to change notification settings - Fork 293
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Create metric: appsec.waf.config_errors #8394
Draft
sezen-datadog
wants to merge
5
commits into
master
Choose a base branch
from
sezen.leblay/APPSEC-56480-config_errors
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Draft
+120
−1
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 58 metrics, 5 unstable metrics. Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.47.0-SNAPSHOT~3765eb5186, baseline=1.47.0-SNAPSHOT~10dc2ef4fb
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.053 s) : 0, 1052591
Total [baseline] (8.678 s) : 0, 8678015
Agent [candidate] (1.046 s) : 0, 1046156
Total [candidate] (8.679 s) : 0, 8678947
section iast
Agent [baseline] (1.171 s) : 0, 1170671
Total [baseline] (9.257 s) : 0, 9256572
Agent [candidate] (1.191 s) : 0, 1191230
Total [candidate] (9.294 s) : 0, 9293766
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.172 s) : 0, 1172151
Total [baseline] (9.198 s) : 0, 9197698
Agent [candidate] (1.172 s) : 0, 1171811
Total [candidate] (9.206 s) : 0, 9206492
section iast_TELEMETRY_OFF
Agent [baseline] (1.169 s) : 0, 1169000
Total [baseline] (9.27 s) : 0, 9269936
Agent [candidate] (1.168 s) : 0, 1167662
Total [candidate] (9.218 s) : 0, 9218175
gantt
title insecure-bank - break down per module: candidate=1.47.0-SNAPSHOT~3765eb5186, baseline=1.47.0-SNAPSHOT~10dc2ef4fb
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (725.093 ms) : 0, 725093
BytebuddyAgent [candidate] (720.343 ms) : 0, 720343
GlobalTracer [baseline] (241.467 ms) : 0, 241467
GlobalTracer [candidate] (240.899 ms) : 0, 240899
AppSec [baseline] (56.2 ms) : 0, 56200
AppSec [candidate] (55.986 ms) : 0, 55986
Remote Config [baseline] (700.27 µs) : 0, 700
Remote Config [candidate] (710.446 µs) : 0, 710
Telemetry [baseline] (13.739 ms) : 0, 13739
Telemetry [candidate] (13.044 ms) : 0, 13044
section iast
BytebuddyAgent [baseline] (835.599 ms) : 0, 835599
BytebuddyAgent [candidate] (850.881 ms) : 0, 850881
GlobalTracer [baseline] (230.185 ms) : 0, 230185
GlobalTracer [candidate] (233.893 ms) : 0, 233893
IAST [baseline] (22.844 ms) : 0, 22844
IAST [candidate] (23.331 ms) : 0, 23331
AppSec [baseline] (57.393 ms) : 0, 57393
AppSec [candidate] (58.191 ms) : 0, 58191
Remote Config [baseline] (635.783 µs) : 0, 636
Remote Config [candidate] (621.675 µs) : 0, 622
Telemetry [baseline] (8.806 ms) : 0, 8806
Telemetry [candidate] (8.769 ms) : 0, 8769
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (836.751 ms) : 0, 836751
BytebuddyAgent [candidate] (836.631 ms) : 0, 836631
GlobalTracer [baseline] (230.526 ms) : 0, 230526
GlobalTracer [candidate] (230.608 ms) : 0, 230608
IAST [baseline] (22.914 ms) : 0, 22914
IAST [candidate] (22.824 ms) : 0, 22824
AppSec [baseline] (57.35 ms) : 0, 57350
AppSec [candidate] (57.287 ms) : 0, 57287
Remote Config [baseline] (613.251 µs) : 0, 613
Remote Config [candidate] (601.703 µs) : 0, 602
Telemetry [baseline] (8.676 ms) : 0, 8676
Telemetry [candidate] (8.652 ms) : 0, 8652
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (832.878 ms) : 0, 832878
BytebuddyAgent [candidate] (833.432 ms) : 0, 833432
GlobalTracer [baseline] (231.133 ms) : 0, 231133
GlobalTracer [candidate] (230.588 ms) : 0, 230588
IAST [baseline] (25.001 ms) : 0, 25001
IAST [candidate] (23.744 ms) : 0, 23744
AppSec [baseline] (55.44 ms) : 0, 55440
AppSec [candidate] (55.567 ms) : 0, 55567
Remote Config [baseline] (635.824 µs) : 0, 636
Remote Config [candidate] (614.742 µs) : 0, 615
Telemetry [baseline] (8.718 ms) : 0, 8718
Telemetry [candidate] (8.565 ms) : 0, 8565
Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.47.0-SNAPSHOT~3765eb5186, baseline=1.47.0-SNAPSHOT~10dc2ef4fb
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.043 s) : 0, 1042645
Total [baseline] (10.421 s) : 0, 10421211
Agent [candidate] (1.042 s) : 0, 1041910
Total [candidate] (10.487 s) : 0, 10486809
section appsec
Agent [baseline] (1.188 s) : 0, 1187570
Total [baseline] (10.775 s) : 0, 10774650
Agent [candidate] (1.186 s) : 0, 1185750
Total [candidate] (10.759 s) : 0, 10758867
section iast
Agent [baseline] (1.17 s) : 0, 1169962
Total [baseline] (11.014 s) : 0, 11014003
Agent [candidate] (1.17 s) : 0, 1169643
Total [candidate] (10.963 s) : 0, 10962832
section profiling
Agent [baseline] (1.263 s) : 0, 1263276
Total [baseline] (10.918 s) : 0, 10918449
Agent [candidate] (1.261 s) : 0, 1260983
Total [candidate] (10.891 s) : 0, 10891023
gantt
title petclinic - break down per module: candidate=1.47.0-SNAPSHOT~3765eb5186, baseline=1.47.0-SNAPSHOT~10dc2ef4fb
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (717.776 ms) : 0, 717776
BytebuddyAgent [candidate] (718.264 ms) : 0, 718264
GlobalTracer [baseline] (239.708 ms) : 0, 239708
GlobalTracer [candidate] (240.145 ms) : 0, 240145
AppSec [baseline] (56.327 ms) : 0, 56327
AppSec [candidate] (55.459 ms) : 0, 55459
Remote Config [baseline] (696.833 µs) : 0, 697
Remote Config [candidate] (697.697 µs) : 0, 698
Telemetry [baseline] (12.986 ms) : 0, 12986
Telemetry [candidate] (12.166 ms) : 0, 12166
section appsec
BytebuddyAgent [baseline] (737.469 ms) : 0, 737469
BytebuddyAgent [candidate] (734.826 ms) : 0, 734826
GlobalTracer [baseline] (237.723 ms) : 0, 237723
GlobalTracer [candidate] (236.796 ms) : 0, 236796
AppSec [baseline] (177.398 ms) : 0, 177398
AppSec [candidate] (179.207 ms) : 0, 179207
Remote Config [baseline] (668.757 µs) : 0, 669
Remote Config [candidate] (684.508 µs) : 0, 685
Telemetry [baseline] (8.3 ms) : 0, 8300
Telemetry [candidate] (8.25 ms) : 0, 8250
IAST [baseline] (21.593 ms) : 0, 21593
IAST [candidate] (21.501 ms) : 0, 21501
section iast
BytebuddyAgent [baseline] (835.394 ms) : 0, 835394
BytebuddyAgent [candidate] (835.49 ms) : 0, 835490
GlobalTracer [baseline] (230.052 ms) : 0, 230052
GlobalTracer [candidate] (230.265 ms) : 0, 230265
AppSec [baseline] (57.136 ms) : 0, 57136
AppSec [candidate] (56.805 ms) : 0, 56805
Remote Config [baseline] (611.988 µs) : 0, 612
Remote Config [candidate] (614.023 µs) : 0, 614
Telemetry [baseline] (8.787 ms) : 0, 8787
Telemetry [candidate] (8.651 ms) : 0, 8651
IAST [baseline] (22.8 ms) : 0, 22800
IAST [candidate] (22.586 ms) : 0, 22586
section profiling
BytebuddyAgent [baseline] (708.515 ms) : 0, 708515
BytebuddyAgent [candidate] (707.844 ms) : 0, 707844
GlobalTracer [baseline] (350.221 ms) : 0, 350221
GlobalTracer [candidate] (350.766 ms) : 0, 350766
AppSec [baseline] (55.538 ms) : 0, 55538
AppSec [candidate] (54.714 ms) : 0, 54714
Remote Config [baseline] (672.239 µs) : 0, 672
Remote Config [candidate] (671.736 µs) : 0, 672
Telemetry [baseline] (9.016 ms) : 0, 9016
Telemetry [candidate] (8.919 ms) : 0, 8919
ProfilingAgent [baseline] (96.957 ms) : 0, 96957
ProfilingAgent [candidate] (96.048 ms) : 0, 96048
Profiling [baseline] (96.981 ms) : 0, 96981
Profiling [candidate] (96.072 ms) : 0, 96072
LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 17 unstable metrics. Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.47.0-SNAPSHOT~3765eb5186, baseline=1.47.0-SNAPSHOT~10dc2ef4fb
dateFormat X
axisFormat %s
section baseline
no_agent (1.333 ms) : 1314, 1353
. : milestone, 1333,
appsec (1.767 ms) : 1743, 1790
. : milestone, 1767,
appsec_no_iast (1.754 ms) : 1729, 1779
. : milestone, 1754,
iast (1.503 ms) : 1479, 1526
. : milestone, 1503,
profiling (1.511 ms) : 1487, 1535
. : milestone, 1511,
tracing (1.49 ms) : 1466, 1515
. : milestone, 1490,
section candidate
no_agent (1.372 ms) : 1351, 1392
. : milestone, 1372,
appsec (1.754 ms) : 1731, 1778
. : milestone, 1754,
appsec_no_iast (1.761 ms) : 1737, 1785
. : milestone, 1761,
iast (1.514 ms) : 1490, 1539
. : milestone, 1514,
profiling (1.502 ms) : 1479, 1526
. : milestone, 1502,
tracing (1.464 ms) : 1440, 1489
. : milestone, 1464,
Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.47.0-SNAPSHOT~3765eb5186, baseline=1.47.0-SNAPSHOT~10dc2ef4fb
dateFormat X
axisFormat %s
section baseline
no_agent (385.655 µs) : 365, 406
. : milestone, 386,
iast (512.794 µs) : 489, 536
. : milestone, 513,
iast_FULL (731.176 µs) : 709, 753
. : milestone, 731,
iast_GLOBAL (560.062 µs) : 538, 582
. : milestone, 560,
iast_HARDCODED_SECRET_DISABLED (515.633 µs) : 493, 538
. : milestone, 516,
iast_INACTIVE (461.743 µs) : 440, 483
. : milestone, 462,
iast_TELEMETRY_OFF (500.233 µs) : 477, 523
. : milestone, 500,
tracing (459.796 µs) : 439, 481
. : milestone, 460,
section candidate
no_agent (380.313 µs) : 361, 400
. : milestone, 380,
iast (516.996 µs) : 495, 539
. : milestone, 517,
iast_FULL (735.793 µs) : 714, 758
. : milestone, 736,
iast_GLOBAL (554.199 µs) : 533, 576
. : milestone, 554,
iast_HARDCODED_SECRET_DISABLED (511.842 µs) : 489, 534
. : milestone, 512,
iast_INACTIVE (463.942 µs) : 442, 485
. : milestone, 464,
iast_TELEMETRY_OFF (503.461 µs) : 480, 527
. : milestone, 503,
tracing (454.376 µs) : 433, 475
. : milestone, 454,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics. Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.47.0-SNAPSHOT~3765eb5186, baseline=1.47.0-SNAPSHOT~10dc2ef4fb
dateFormat X
axisFormat %s
section baseline
no_agent (1.472 ms) : 1460, 1483
. : milestone, 1472,
appsec (2.365 ms) : 2321, 2408
. : milestone, 2365,
iast (2.119 ms) : 2063, 2174
. : milestone, 2119,
iast_GLOBAL (2.152 ms) : 2097, 2207
. : milestone, 2152,
profiling (1.993 ms) : 1948, 2038
. : milestone, 1993,
tracing (1.956 ms) : 1913, 1998
. : milestone, 1956,
section candidate
no_agent (1.469 ms) : 1457, 1480
. : milestone, 1469,
appsec (2.365 ms) : 2321, 2408
. : milestone, 2365,
iast (2.108 ms) : 2054, 2163
. : milestone, 2108,
iast_GLOBAL (2.157 ms) : 2102, 2212
. : milestone, 2157,
profiling (1.963 ms) : 1919, 2006
. : milestone, 1963,
tracing (1.947 ms) : 1905, 1989
. : milestone, 1947,
Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.47.0-SNAPSHOT~3765eb5186, baseline=1.47.0-SNAPSHOT~10dc2ef4fb
dateFormat X
axisFormat %s
section baseline
no_agent (15.063 s) : 15063000, 15063000
. : milestone, 15063000,
appsec (15.045 s) : 15045000, 15045000
. : milestone, 15045000,
iast (18.416 s) : 18416000, 18416000
. : milestone, 18416000,
iast_GLOBAL (17.839 s) : 17839000, 17839000
. : milestone, 17839000,
profiling (14.991 s) : 14991000, 14991000
. : milestone, 14991000,
tracing (14.988 s) : 14988000, 14988000
. : milestone, 14988000,
section candidate
no_agent (15.335 s) : 15335000, 15335000
. : milestone, 15335000,
appsec (15.143 s) : 15143000, 15143000
. : milestone, 15143000,
iast (19.119 s) : 19119000, 19119000
. : milestone, 19119000,
iast_GLOBAL (17.32 s) : 17320000, 17320000
. : milestone, 17320000,
profiling (15.261 s) : 15261000, 15261000
. : milestone, 15261000,
tracing (14.927 s) : 14927000, 14927000
. : milestone, 14927000,
|
200de0f
to
5358abc
Compare
smola
requested changes
Feb 17, 2025
dd-java-agent/appsec/src/main/java/com/datadog/appsec/gateway/AppSecRequestContext.java
Outdated
Show resolved
Hide resolved
3602794
to
b81bc2b
Compare
smola
requested changes
Feb 17, 2025
dd-java-agent/appsec/src/main/java/com/datadog/appsec/gateway/AppSecRequestContext.java
Outdated
Show resolved
Hide resolved
2a5843a
to
58f7a0c
Compare
58f7a0c
to
325d88b
Compare
smola
requested changes
Feb 17, 2025
dd-java-agent/appsec/src/test/groovy/com/datadog/appsec/test/StubAppSecConfigService.groovy
Outdated
Show resolved
Hide resolved
dd-java-agent/appsec/src/main/java/com/datadog/appsec/powerwaf/PowerWAFModule.java
Show resolved
Hide resolved
auto-merge was automatically disabled
February 18, 2025 08:52
Pull request was converted to draft
d51336d
to
66744d3
Compare
smola
requested changes
Feb 19, 2025
dd-java-agent/appsec/src/main/java/com/datadog/appsec/powerwaf/PowerWAFModule.java
Show resolved
Hide resolved
dd-java-agent/appsec/src/main/java/com/datadog/appsec/powerwaf/PowerWAFModule.java
Outdated
Show resolved
Hide resolved
cfb9393
to
b663d78
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What Does This Do
Creates metric appsec.waf.config_errors which keeps count of errors reported by the WAF on about particular config item
Motivation
This metric counts the configuration errors as reported by libddwaf
Additional Notes
Contributor Checklist
type:
and (comp:
orinst:
) labels in addition to any usefull labelsclose
,fix
or any linking keywords when referencing an issue.Use
solves
instead, and assign the PR milestone to the issueJira ticket: APPSEC-56480