BrooksCunningham

# vcl_init

# If there is a cache hit, then the request first goes to the NGWAF.
# If the Fastly NGWAF returns a block via a 406, then the block will be returned back to the client.
# If the Fastly NGWAF returns a block via a 567, then a VCL restart occurs
# the restarted request may then be served from cache. 

sub vcl_recv {
    set req.http.Fastly-Force-Shield = "1";
}

BrooksCunningham

name: WAF API Spec Demo

on:
  workflow_dispatch:

jobs:
  ngwaf-api-spec-job:
    runs-on: ubuntu-latest
    environment: production
    timeout-minutes: 2

BrooksCunningham

# ConfigMap: Contains the updated Envoy configuration with ext_authz integration.
apiVersion: v1
kind: ConfigMap
metadata:
  name: envoy-config
data:
  envoy.yaml: |
    node:
      id: proxy-node
      cluster: proxy-cluster

BrooksCunningham

package main

import (
	"fmt"
	"log"
	"os"
	"time"

	sigsci "github.com/signalsciences/go-sigsci"
)

BrooksCunningham

import requests, calendar, os, time
from datetime import datetime, timedelta

# For details see
# https://docs.fastly.com/signalsciences/developer/extract-your-data/

# Get environment variables
SIGSCITOKEN = os.getenv('SIGSCITOKEN')
SIGSCIEMAIL = os.environ.get('SIGSCIEMAIL')

BrooksCunningham

# Snippet rate-limiter-v1-origin_waf_response-init-init : 100
# Begin rate-limiter webbots - Next Gen WAF Response
penaltybox rl_origin_waf_response_pb {}
ratecounter rl_origin_waf_response_rc {}

table rl_origin_waf_response_methods {
  "GET": "true",
  "PUT": "true",
  "TRACE": "true",
  "POST": "true",

BrooksCunningham

from SigSci import *
import os
import json


# setup sigsci api module
sigsci = SigSciAPI()

# required variables
sigsci.email = os.environ['SIGSCI_EMAIL']

BrooksCunningham

[local_server]

  [local_server.backends]

    [local_server.backends.httpbin]
      url = "https://httpbin.org"

    [local_server.backends.google_dns]
      url = "https://dns.google"
      

BrooksCunningham

Keybase proof

I hereby claim:

• I am brookscunningham on github.
• I am bcunning (https://keybase.io/bcunning) on keybase.
• I have a public key ASBfia5ViKw9TWkHHTPYA__g8t0E8ti_YQ_djlwObHJC0wo

To claim this, I am signing this object: