Struct WafEngine 

pub struct WafEngine { /* private fields */ }

The main WAF engine composing all sub-systems.

Implementations

impl WafEngine

pub fn new(config: WafConfig) -> Result<Self>

Create a new WAF engine from configuration.

pub fn check(&self, req: &WafRequest) -> WafDecision

Check a request through all WAF layers. Returns the first non-Allow decision, or WafDecision::Allow.

pub fn check_with_headers( &self, req: &WafRequest, ) -> (WafDecision, Vec<(String, String)>)

Check a request and also return rate-limit response headers if applicable.

pub fn record_connection(&self, ip: IpAddr)

Record a DDoS connection start.

pub fn release_connection(&self, ip: IpAddr)

Record a DDoS connection end.

pub fn stats(&self) -> WafStats

Get current WAF statistics.

pub fn audit_log(&self) -> &WafAuditLog

Get the audit log.

pub fn recent_events(&self, count: usize) -> Vec<WafEvent>

Get recent audit events.

pub fn prometheus_metrics(&self) -> String

Get Prometheus metrics.

pub fn reload_ip_filter(&self, config: IpFilterConfig)

Hot-reload the IP filter configuration.

pub fn cleanup(&self)

Periodically clean up stale state (connection tracking, rate-limit buckets).