Struct Engine 

pub struct Engine { /* private fields */ }

Main WAF rule engine.

Implementations

impl Engine

pub fn empty() -> Self

Create an empty engine with no rules.

pub fn set_max_risk(&self, max_risk: f64)

Set maximum risk score (100.0 default, 1000.0 for extended range).

pub fn max_risk(&self) -> f64

Get maximum risk score.

pub fn set_repeat_multipliers(&self, enabled: bool)

Enable or disable repeat offender multipliers.

pub fn load_rules(&mut self, json: &[u8]) -> Result<usize, WafError>

Load rules from JSON bytes.

pub fn precompute_rules(&self, json: &[u8]) -> Result<CompiledRules, WafError>

Precompute all rule structures including regex compilation.

This is an expensive operation that should happen outside of global locks.

pub fn reload_from_compiled(&mut self, compiled: CompiledRules)

Fast swap of rule state using precomputed data.

pub fn parse_rules(json: &[u8]) -> Result<Vec<WafRule>, WafError>

Parse rules from JSON bytes without modifying engine state.

pub fn reload_rules(&mut self, rules: Vec<WafRule>) -> Result<(), WafError>

Reload the engine with a new set of rules.

pub fn rule_count(&self) -> usize

Get the number of loaded rules.

pub fn analyze(&self, req: &Request<'_>) -> Verdict

Analyze a request and return a verdict.

pub fn analyze_with_trace( &self, req: &Request<'_>, trace: &mut dyn TraceSink, ) -> Verdict

Analyze a request and emit evaluation trace events.

pub fn analyze_with_timeout( &self, req: &Request<'_>, timeout: Duration, ) -> Verdict

Analyze a request with a timeout to prevent DoS via complex regexes.

Arguments

• req - The request to analyze
• timeout - Maximum time allowed for rule evaluation (capped at MAX_EVAL_TIMEOUT)

Returns

A Verdict with timed_out=true if evaluation exceeded the deadline. Partial results (rules evaluated before timeout) are still included.

pub fn analyze_safe(&self, req: &Request<'_>) -> Verdict

Analyze a request with the default timeout (DEFAULT_EVAL_TIMEOUT).