Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] Safeline with traefik plugin frozen processing with using GoTestWAF #1142

Open
lordraiden opened this issue Jan 22, 2025 · 1 comment

Comments

@lordraiden
Copy link

What happened?

I have a setup with traefik, traefik safeline plugin, and safeline.

When I ran GoTestWAF https://github.com/wallarm/gotestwaf it gets frozen in the middle of the process, I think is easy to reproduce. The hw is not an issue, is running on a 24cores and 64RAM machine

Image

Image

No rate limit or anything enable to ban IP's, traefik is fine because I can browse the website anyway
Is there a way to improve the processing time?

How we reproduce?

  1. ...
  2. ...
  3. ...

Expected behavior

The test to finish
Safeline to process the logs faster? and not freeze the whole test? maybe at least the balance mode should be available for free? I don't think is a feature that is worth it for pro, why have a penalty in performance?

Error log

container-logs-2025-01-22T17-35-14.zip

@lordraiden
Copy link
Author

lordraiden commented Jan 23, 2025

I manage to get it working changing some arguments in gotestwaf.
In any case someone is interested these are the results, safeline was configured in strict mode.

docker run --rm --network="host" -v /your/path:/app/reports wallarm/gotestwaf --url=https://mydomain.com --noEmailReport --idleConnTimeout=1 --ignoreUnresolved

Las 2 parameters "fixed" the issue in the first post.

waf-evaluation-report-2025-January-23-04-03-18(1).csv

Image

Image

Image

Image

Maybe gotestwaf can be used to finetune Safeline even more

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant