Highlights:
- Added logging and metrics counter (
waf_rejections), when WAF rejection takes place. - Moved handling of WAF rule evaluation to higher level, so that every request (single ones, not batch requests) will be subjected to checks.
- Added a new signal handler, to intercept
USR1signals, sent to application process. This signal can be used to toggle a new flag, which is responsible for allowing new websocket subscriptions, i.e. when the flag is set totrue(default) new subscriptions can be made, if it's switched tofalse, cacher will refuse to put any new responses to cache and respectively to create a new subscriptions for them. Present subscription and cache entries will continue to exist, until they are removed due to absence of cache hits.
What's Changed
- Created metric for counting the number of WAF-caused request rejection by @bobs4462 in #183
- Moved WAF filtering to rpc handler by @bobs4462 in #188
- Added signal handling to prevent new subscriptions by @bobs4462 in #189
- chore: bump version to 0.1.35 by @bobs4462 in #191
Full Changelog: 0.1.34...0.1.35