-
Notifications
You must be signed in to change notification settings - Fork 278
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Always collect accept, content-type and user-agent when appsec is enabled #7009
Merged
manuel-alvarez-alvarez
merged 1 commit into
master
from
malvarez/asm-default-header-collection
May 13, 2024
Merged
Always collect accept, content-type and user-agent when appsec is enabled #7009
manuel-alvarez-alvarez
merged 1 commit into
master
from
malvarez/asm-default-header-collection
May 13, 2024
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 49 metrics, 14 unstable metrics. Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.35.0-SNAPSHOT~5d13bee2a5, baseline=1.35.0-SNAPSHOT~0946fa5eba
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.079 s) : 0, 1079322
Total [baseline] (10.418 s) : 0, 10417647
Agent [candidate] (1.08 s) : 0, 1080047
Total [candidate] (10.488 s) : 0, 10487662
section appsec
Agent [baseline] (1.199 s) : 0, 1199472
Total [baseline] (10.461 s) : 0, 10461126
Agent [candidate] (1.201 s) : 0, 1200804
Total [candidate] (10.491 s) : 0, 10490819
section iast
Agent [baseline] (1.221 s) : 0, 1220935
Total [baseline] (10.778 s) : 0, 10777718
Agent [candidate] (1.203 s) : 0, 1203398
Total [candidate] (10.767 s) : 0, 10767405
section profiling
Agent [baseline] (1.288 s) : 0, 1288172
Total [baseline] (10.685 s) : 0, 10684602
Agent [candidate] (1.282 s) : 0, 1282257
Total [candidate] (10.624 s) : 0, 10623836
gantt
title petclinic - break down per module: candidate=1.35.0-SNAPSHOT~5d13bee2a5, baseline=1.35.0-SNAPSHOT~0946fa5eba
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (675.513 ms) : 0, 675513
BytebuddyAgent [candidate] (675.794 ms) : 0, 675794
GlobalTracer [baseline] (311.745 ms) : 0, 311745
GlobalTracer [candidate] (311.601 ms) : 0, 311601
AppSec [baseline] (49.49 ms) : 0, 49490
AppSec [candidate] (49.903 ms) : 0, 49903
Remote Config [baseline] (659.252 µs) : 0, 659
Remote Config [candidate] (666.151 µs) : 0, 666
Telemetry [baseline] (7.585 ms) : 0, 7585
Telemetry [candidate] (7.67 ms) : 0, 7670
section appsec
BytebuddyAgent [baseline] (698.627 ms) : 0, 698627
BytebuddyAgent [candidate] (699.723 ms) : 0, 699723
GlobalTracer [baseline] (294.528 ms) : 0, 294528
GlobalTracer [candidate] (295.053 ms) : 0, 295053
AppSec [baseline] (152.697 ms) : 0, 152697
AppSec [candidate] (152.966 ms) : 0, 152966
IAST [baseline] (19.428 ms) : 0, 19428
IAST [candidate] (19.339 ms) : 0, 19339
Remote Config [baseline] (618.688 µs) : 0, 619
Remote Config [candidate] (619.465 µs) : 0, 619
Telemetry [baseline] (8.796 ms) : 0, 8796
Telemetry [candidate] (8.207 ms) : 0, 8207
section iast
BytebuddyAgent [baseline] (807.724 ms) : 0, 807724
BytebuddyAgent [candidate] (795.059 ms) : 0, 795059
GlobalTracer [baseline] (295.361 ms) : 0, 295361
GlobalTracer [candidate] (291.448 ms) : 0, 291448
AppSec [baseline] (49.172 ms) : 0, 49172
AppSec [candidate] (50.388 ms) : 0, 50388
IAST [baseline] (24.907 ms) : 0, 24907
IAST [candidate] (24.183 ms) : 0, 24183
Remote Config [baseline] (1.409 ms) : 0, 1409
Remote Config [candidate] (1.304 ms) : 0, 1304
Telemetry [baseline] (7.509 ms) : 0, 7509
Telemetry [candidate] (6.614 ms) : 0, 6614
section profiling
BytebuddyAgent [baseline] (688.148 ms) : 0, 688148
BytebuddyAgent [candidate] (684.69 ms) : 0, 684690
GlobalTracer [baseline] (386.177 ms) : 0, 386177
GlobalTracer [candidate] (385.169 ms) : 0, 385169
AppSec [baseline] (51.114 ms) : 0, 51114
AppSec [candidate] (50.732 ms) : 0, 50732
Remote Config [baseline] (724.241 µs) : 0, 724
Remote Config [candidate] (711.836 µs) : 0, 712
Telemetry [baseline] (7.6 ms) : 0, 7600
Telemetry [candidate] (7.51 ms) : 0, 7510
ProfilingAgent [baseline] (97.063 ms) : 0, 97063
ProfilingAgent [candidate] (96.503 ms) : 0, 96503
Profiling [baseline] (97.087 ms) : 0, 97087
Profiling [candidate] (96.527 ms) : 0, 96527
Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.35.0-SNAPSHOT~5d13bee2a5, baseline=1.35.0-SNAPSHOT~0946fa5eba
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.086 s) : 0, 1086482
Total [baseline] (8.561 s) : 0, 8560872
Agent [candidate] (1.076 s) : 0, 1076417
Total [candidate] (8.538 s) : 0, 8538411
section iast
Agent [baseline] (1.201 s) : 0, 1200649
Total [baseline] (9.05 s) : 0, 9049623
Agent [candidate] (1.205 s) : 0, 1204568
Total [candidate] (9.024 s) : 0, 9023754
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.202 s) : 0, 1201880
Total [baseline] (8.986 s) : 0, 8985972
Agent [candidate] (1.203 s) : 0, 1202899
Total [candidate] (9.006 s) : 0, 9006388
section iast_TELEMETRY_OFF
Agent [baseline] (1.208 s) : 0, 1208404
Total [baseline] (8.978 s) : 0, 8978067
Agent [candidate] (1.207 s) : 0, 1206957
Total [candidate] (9.021 s) : 0, 9021158
gantt
title insecure-bank - break down per module: candidate=1.35.0-SNAPSHOT~5d13bee2a5, baseline=1.35.0-SNAPSHOT~0946fa5eba
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (679.892 ms) : 0, 679892
BytebuddyAgent [candidate] (673.86 ms) : 0, 673860
GlobalTracer [baseline] (314.015 ms) : 0, 314015
GlobalTracer [candidate] (310.67 ms) : 0, 310670
AppSec [baseline] (49.841 ms) : 0, 49841
AppSec [candidate] (49.401 ms) : 0, 49401
Remote Config [baseline] (667.295 µs) : 0, 667
Remote Config [candidate] (650.852 µs) : 0, 651
Telemetry [baseline] (7.585 ms) : 0, 7585
Telemetry [candidate] (7.519 ms) : 0, 7519
section iast
BytebuddyAgent [baseline] (793.666 ms) : 0, 793666
BytebuddyAgent [candidate] (796.025 ms) : 0, 796025
GlobalTracer [baseline] (290.818 ms) : 0, 290818
GlobalTracer [candidate] (291.939 ms) : 0, 291939
AppSec [baseline] (52.031 ms) : 0, 52031
AppSec [candidate] (50.62 ms) : 0, 50620
IAST [baseline] (22.589 ms) : 0, 22589
IAST [candidate] (23.562 ms) : 0, 23562
Remote Config [baseline] (652.495 µs) : 0, 652
Remote Config [candidate] (1.344 ms) : 0, 1344
Telemetry [baseline] (6.618 ms) : 0, 6618
Telemetry [candidate] (6.655 ms) : 0, 6655
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (794.402 ms) : 0, 794402
BytebuddyAgent [candidate] (794.826 ms) : 0, 794826
GlobalTracer [baseline] (291.367 ms) : 0, 291367
GlobalTracer [candidate] (291.536 ms) : 0, 291536
AppSec [baseline] (51.092 ms) : 0, 51092
AppSec [candidate] (52.494 ms) : 0, 52494
IAST [baseline] (23.487 ms) : 0, 23487
IAST [candidate] (22.481 ms) : 0, 22481
Remote Config [baseline] (621.592 µs) : 0, 622
Remote Config [candidate] (591.71 µs) : 0, 592
Telemetry [baseline] (6.598 ms) : 0, 6598
Telemetry [candidate] (6.589 ms) : 0, 6589
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (797.946 ms) : 0, 797946
BytebuddyAgent [candidate] (796.821 ms) : 0, 796821
GlobalTracer [baseline] (292.768 ms) : 0, 292768
GlobalTracer [candidate] (292.745 ms) : 0, 292745
AppSec [baseline] (50.048 ms) : 0, 50048
AppSec [candidate] (51.789 ms) : 0, 51789
IAST [baseline] (25.104 ms) : 0, 25104
IAST [candidate] (23.917 ms) : 0, 23917
Remote Config [baseline] (623.326 µs) : 0, 623
Remote Config [candidate] (599.604 µs) : 0, 600
Telemetry [baseline] (7.315 ms) : 0, 7315
Telemetry [candidate] (6.512 ms) : 0, 6512
LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 1 performance regressions! Performance is the same for 11 metrics, 16 unstable metrics.
Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.35.0-SNAPSHOT~5d13bee2a5, baseline=1.35.0-SNAPSHOT~0946fa5eba
dateFormat X
axisFormat %s
section baseline
no_agent (365.705 µs) : 346, 385
. : milestone, 366,
iast (483.301 µs) : 463, 504
. : milestone, 483,
iast_FULL (534.231 µs) : 514, 555
. : milestone, 534,
iast_GLOBAL (490.27 µs) : 470, 511
. : milestone, 490,
iast_HARDCODED_SECRET_DISABLED (476.383 µs) : 455, 497
. : milestone, 476,
iast_INACTIVE (449.927 µs) : 429, 471
. : milestone, 450,
iast_TELEMETRY_OFF (467.468 µs) : 446, 489
. : milestone, 467,
tracing (442.639 µs) : 422, 463
. : milestone, 443,
section candidate
no_agent (375.654 µs) : 356, 395
. : milestone, 376,
iast (475.195 µs) : 455, 496
. : milestone, 475,
iast_FULL (538.587 µs) : 518, 559
. : milestone, 539,
iast_GLOBAL (497.906 µs) : 477, 519
. : milestone, 498,
iast_HARDCODED_SECRET_DISABLED (471.769 µs) : 451, 493
. : milestone, 472,
iast_INACTIVE (451.168 µs) : 431, 472
. : milestone, 451,
iast_TELEMETRY_OFF (471.145 µs) : 450, 492
. : milestone, 471,
tracing (446.887 µs) : 426, 468
. : milestone, 447,
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.35.0-SNAPSHOT~5d13bee2a5, baseline=1.35.0-SNAPSHOT~0946fa5eba
dateFormat X
axisFormat %s
section baseline
no_agent (1.356 ms) : 1337, 1375
. : milestone, 1356,
appsec (1.693 ms) : 1668, 1717
. : milestone, 1693,
appsec_no_iast (1.705 ms) : 1681, 1729
. : milestone, 1705,
iast (1.474 ms) : 1451, 1497
. : milestone, 1474,
profiling (1.485 ms) : 1461, 1510
. : milestone, 1485,
tracing (1.476 ms) : 1453, 1500
. : milestone, 1476,
section candidate
no_agent (1.342 ms) : 1323, 1362
. : milestone, 1342,
appsec (1.715 ms) : 1692, 1738
. : milestone, 1715,
appsec_no_iast (1.711 ms) : 1686, 1735
. : milestone, 1711,
iast (1.472 ms) : 1449, 1495
. : milestone, 1472,
profiling (1.543 ms) : 1517, 1568
. : milestone, 1543,
tracing (1.461 ms) : 1437, 1485
. : milestone, 1461,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics. Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.35.0-SNAPSHOT~5d13bee2a5, baseline=1.35.0-SNAPSHOT~0946fa5eba
dateFormat X
axisFormat %s
section baseline
no_agent (15.34 s) : 15340000, 15340000
. : milestone, 15340000,
appsec (15.009 s) : 15009000, 15009000
. : milestone, 15009000,
iast (18.779 s) : 18779000, 18779000
. : milestone, 18779000,
iast_GLOBAL (17.718 s) : 17718000, 17718000
. : milestone, 17718000,
profiling (14.843 s) : 14843000, 14843000
. : milestone, 14843000,
tracing (15.558 s) : 15558000, 15558000
. : milestone, 15558000,
section candidate
no_agent (15.007 s) : 15007000, 15007000
. : milestone, 15007000,
appsec (15.271 s) : 15271000, 15271000
. : milestone, 15271000,
iast (18.571 s) : 18571000, 18571000
. : milestone, 18571000,
iast_GLOBAL (17.995 s) : 17995000, 17995000
. : milestone, 17995000,
profiling (15.279 s) : 15279000, 15279000
. : milestone, 15279000,
tracing (15.007 s) : 15007000, 15007000
. : milestone, 15007000,
Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.35.0-SNAPSHOT~5d13bee2a5, baseline=1.35.0-SNAPSHOT~0946fa5eba
dateFormat X
axisFormat %s
section baseline
no_agent (1.464 ms) : 1453, 1476
. : milestone, 1464,
appsec (2.195 ms) : 2161, 2229
. : milestone, 2195,
iast (1.876 ms) : 1841, 1911
. : milestone, 1876,
iast_GLOBAL (1.908 ms) : 1873, 1944
. : milestone, 1908,
profiling (1.846 ms) : 1813, 1879
. : milestone, 1846,
tracing (1.828 ms) : 1796, 1861
. : milestone, 1828,
section candidate
no_agent (1.463 ms) : 1452, 1475
. : milestone, 1463,
appsec (2.191 ms) : 2157, 2225
. : milestone, 2191,
iast (1.866 ms) : 1832, 1901
. : milestone, 1866,
iast_GLOBAL (1.916 ms) : 1881, 1952
. : milestone, 1916,
profiling (1.834 ms) : 1802, 1867
. : milestone, 1834,
tracing (1.822 ms) : 1790, 1853
. : milestone, 1822,
|
a78d34c
to
20660ea
Compare
smola
approved these changes
May 13, 2024
20660ea
to
2f79a56
Compare
2f79a56
to
5d13bee
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What Does This Do
Always collects
Accept
,Content-Type
andUser-Agent
when appsec is enabledMotivation
Additional Notes
Jira ticket: APPSEC-52885