corazawaf / coraza-caddy

OWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities
https://www.coraza.io/
Apache License 2.0
356 stars 41 forks source link

Prometheus metrics #82

Open jpds opened 1 year ago

jpds commented 1 year ago

The WAF level should expose Prometheus metrics the same way Caddy does, some useful base metrics would be:

jcchavezs commented 1 year ago

Thanks for coming by. We introduced this set of metrics in proxy-wasm https://github.com/corazawaf/coraza-proxy-wasm/pull/29 and there is this other discussion around metrics in coraza itself https://github.com/corazawaf/coraza/pull/774.

I think given the interest we should be able to either have here what we have in proxy-wasm or have a discussion around what would be better set of metrics. I would also love to involve @azurit and @airween to get some inputs on what good set of metrics for a WAF look like.

azurit commented 1 year ago

I don't think i am able to add anything valuable into this discussion.