zig-utils/zig-waf

public

Clone

Clone with HTTPS

Push over the same URL. A password will not work: create a token under access tokens and use it in place of one.

A high-performance, embeddable web application firewall and fleet platform written in Zig.

Closed

[WAF-59] Add PostgreSQL backup, restore, failover guidance, and recovery drills

#60 opened 8 days ago by chris · 1 comment

Closed

[WAF-58] Implement alerts, signed webhooks, and fleet telemetry

#59 opened 8 days ago by chris · 1 comment

Closed

[WAF-57] Implement local authentication, RBAC, API tokens, sessions, and OIDC

#58 opened 8 days ago by chris · 1 comment

Closed

[WAF-56] Implement SQLite test and demo repositories

#57 opened 8 days ago by chris · 1 comment

Closed

[WAF-55] Implement partitioned event search, retention, and export

#56 opened 8 days ago by chris · 1 comment

Closed

[WAF-54] Implement disk-backed event queues and batched PostgreSQL ingestion

#55 opened 8 days ago by chris · 1 comment

Closed

[WAF-53] Implement signed policy bundles and rollout orchestration

#54 opened 8 days ago by chris · 2 comments

Closed

[WAF-52] Implement PostgreSQL repositories and isolated connection pools

#53 opened 8 days ago by chris · 1 comment

Closed

[WAF-51] Implement the PostgreSQL schema and transactional migrations

#52 opened 8 days ago by chris · 1 comment

Closed

[WAF-50] Implement the Pantry-managed PostgreSQL deployment profile

#51 opened 8 days ago by chris · 2 comments

Closed

[WAF-48] Define and implement the versioned API v1 OpenAPI contract

#49 opened 8 days ago by chris · 2 comments

Closed

[WAF-42] Integrate zig-tls for frontend, upstream, and mTLS traffic

#43 opened 8 days ago by chris · 4 comments

Closed

[WAF-40] Implement the HTTP/1.1 reverse proxy

#41 opened 8 days ago by chris · 3 comments

Closed

[WAF-39] Enforce request-path throughput, p99, and RSS release gates

#40 opened 8 days ago by chris · 1 comment

Closed

[WAF-38] Add parser, body, ABI, HTTP, and storage fuzzing

#39 opened 8 days ago by chris · 2 comments

Closed

[WAF-33] Build validate, format, test, explain, replay, and benchmark CLI tools

#34 opened 8 days ago by chris · 4 comments

Closed

[WAF-32] Publish a versioned C connector ABI

#33 opened 8 days ago by chris · 3 comments

Closed

[WAF-31] Add redaction, debug logs, Prometheus, and OpenTelemetry

#32 opened 8 days ago by chris · 3 comments

Closed

[WAF-30] Implement serial, concurrent, syslog, HTTPS, and callback writers

#31 opened 8 days ago by chris · 3 comments

Closed

[WAF-29] Implement native, legacy JSON, JSON, and OCSF audit formats

#30 opened 8 days ago by chris · 4 comments

Closed

[WAF-28] Implement response-header and body inspection and mutation

#29 opened 8 days ago by chris · 3 comments

Closed

[WAF-26] Implement JSON, URL-encoded, and raw body processors

#27 opened 8 days ago by chris · 5 comments

Closed

[WAF-25] Implement strict multipart and upload handling

#26 opened 8 days ago by chris · 3 comments

Closed

[WAF-24] Implement bounded request buffering and disk spooling

#25 opened 8 days ago by chris · 2 comments

Closed

[WAF-23] Parse request targets, headers, cookies, and URL encoding

#24 opened 8 days ago by chris · 4 comments

Closed

[WAF-22] Implement native Zig and C plugin registries

#23 opened 8 days ago by chris · 2 comments

Closed

[WAF-21] Implement Lua, exec, sanitization, hashing, and content mutation

#22 opened 8 days ago by chris · 3 comments

Closed

[WAF-20] Implement validation, GeoIP, RBL, file, identity, and hash operators

#21 opened 8 days ago by chris · 3 comments

Closed

[WAF-19] Integrate zig-injection SQLi and XSS operators

#20 opened 8 days ago by chris · 4 comments

Closed

[WAF-18] Implement phrase, dataset, Aho-Corasick, and IP operators

#19 opened 8 days ago by chris · 5 comments