cloudflare / wirefilter

An execution engine for Wireshark-like filters
https://blog.cloudflare.com/building-fast-interpreters-in-rust/
MIT License
958 stars 85 forks source link

Full syntax support for Cloudflare Firewall Rules language #62

Open SerCeMan opened 4 years ago

SerCeMan commented 4 years ago

Hi!

I've been looking into writing unit tests for firewall rules using wirefilter. However, as far as I can see, wirefilter doesn't support the full syntax of Cloudflare Firewall Rules language. For instance, as far as can I can see it's not possible to express complex types, e.g. arrays, as well as transformation functions.

Do you know if wirefilter is planning to support the full cloudflare syntax, or is it going to support the current set of expressions only?

marmeladema commented 4 years ago

Hello! The full syntax is available in the cloudflare branch. It will probably be merged in the master branch at some point but in the mean time, feel free to use it

SerCeMan commented 4 years ago

Oh, nice! Thanks, I didn't know about the branch!

nitrocode commented 1 year ago

Hi all. Any update on the cloudflare branch merge to master? We'd like to take advantage of the unit testing framework for cloudflare called firewalker (thanks SerCeMan) but we'd like to also use the latest feature sets.

Please continue to maintain this repo. It's very handy!

SerCeMan commented 1 year ago

Hey, @nitrocode! It'd very be useful if you could raise an issue about any unsupported features. There is a growing patch here to catch up on them.

But it would definitely be 💯 if Cloudflare could keep the branch up-to-date as well.