Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat : Gcp load balance quic protocol #745

Merged
merged 16 commits into from
Jan 25, 2023

Conversation

shefalibisht1992
Copy link
Contributor

@shefalibisht1992 shefalibisht1992 commented Jan 7, 2023

Description

GCP Load balancer HTTPS target proxy is not configured with QUIC protocol.
This policy identifies Load Balancer HTTPS target proxies which are not configured with QUIC protocol. Enabling QUIC protocol in load balancer target https proxies adds advantage by establishing connections faster, stream-based multiplexing, improved loss recovery, and eliminates head-of-line blocking

Fixes # (GCP Load balancer HTTPS target proxy is not configured with QUIC protocol.

Type of change

Please delete options that are not relevant.

  • New feature (non-breaking change which adds functionality)

How Has This Been Tested?

GCP data collector was run to gather the new data of quic negotiation. The generated gcp load balancer file was uploaded to s3 batch. Data shipper was then run to fetch this data in the elastic search. Last, the new rule was run against the data and hence checked accordingly.

Checklist:

  • My code follows the style guidelines of this project
  • I have performed a self-review of my code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • The commit message/PR follows our guidelines

"ruleArn": "arn:aws:events:us-east-1:***REMOVED***:rule/Enable_Quic_Protocol_For_Load_Balancer",
"status": "ENABLED",
"userId": "ASGC",
"displayName": "Configure API Restriction for API Keys",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please check if the displayName is correct for this policy

Copy link
Contributor

@AishwaryaKulkarni97 AishwaryaKulkarni97 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please change target type to gcploadbalancerfrontend

…S target proxy is not configured with QUIC protocol>

updated display name for the rule
@shefalibisht1992 shefalibisht1992 changed the title Gcp load balance quic protocol feat : Gcp load balance quic protocol Jan 11, 2023
# Conflicts:
#	installer/resources/lambda_rule_engine/files/rule_engine_cloudwatch_gcp_rules.json
#	installer/resources/pacbot_app/files/DB_Policy.sql
#	jobs/gcp-discovery/src/main/java/com/tmobile/pacbot/gcp/inventory/collector/LoadBalancerCollector.java
#	jobs/pacman-awsrules/src/main/java/com/tmobile/cloud/constants/PacmanRuleConstants.java
@sonarcloud
Copy link

sonarcloud bot commented Jan 25, 2023

SonarCloud Quality Gate failed.    Quality Gate failed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

0.0% 0.0% Coverage
10.4% 10.4% Duplication

@AishwaryaKulkarni97 AishwaryaKulkarni97 merged commit 504fea1 into master Jan 25, 2023
@AishwaryaKulkarni97 AishwaryaKulkarni97 deleted the gcp-load-balance-quic-protocol branch January 25, 2023 17:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants