diff --git a/doc/config/coraza.cfg b/doc/config/coraza.cfg index 1956d93..a588091 100644 --- a/doc/config/coraza.cfg +++ b/doc/config/coraza.cfg @@ -21,4 +21,6 @@ spoe-message coraza-req spoe-message coraza-res args app=str(sample_app) id=unique-id version=res.ver status=status headers=res.hdrs body=res.body - event on-http-response \ No newline at end of file + event on-http-response + + diff --git a/docker/haproxy/coraza.cfg b/docker/haproxy/coraza.cfg index 04619ce..a588091 100644 --- a/docker/haproxy/coraza.cfg +++ b/docker/haproxy/coraza.cfg @@ -1,19 +1,26 @@ # https://github.com/haproxy/haproxy/blob/master/doc/SPOE.txt +# /etc/haproxy/coraza.cfg [coraza] spoe-agent coraza-agent - messages coraza-req coraza-res + # Process HTTP requests only (the responses are not evaluated) + messages coraza-req + # Comment the previous line and add coraza-res, to process responses also. + # NOTE: there are still some memory & caching issues, so use this with care + #messages coraza-req coraza-res option var-prefix coraza option set-on-error error - timeout hello 100ms + timeout hello 2s timeout idle 2m timeout processing 500ms use-backend coraza-spoa log global spoe-message coraza-req - args app=fe_name id=unique-id src-ip=src src-port=src_port dst-ip=dst dst-port=dst_port method=method path=path query=query version=req.ver headers=req.hdrs body=req.body + args app=str(sample_app) id=unique-id src-ip=src src-port=src_port dst-ip=dst dst-port=dst_port method=method path=path query=query version=req.ver headers=req.hdrs body=req.body event on-frontend-http-request spoe-message coraza-res - args app=fe_name id=unique-id version=res.ver status=status headers=res.hdrs body=res.body + args app=str(sample_app) id=unique-id version=res.ver status=status headers=res.hdrs body=res.body event on-http-response + +