loki5512344
aa787a558c
Traffic Intel (was dead code, now wired): - TrafficHook in listener accept path: cps/pps windows -> AttackDetector - auto-ban IPs below reputation threshold under attack ([detect.autoban]) - AlertDispatcher: webhook on attack state transition only (dedup), metrics AUTO_BANS_TOTAL / INTEL_* ; [detect.alert].webhook_url XDP SYN RST-challenge (Oubliette pattern, off by default): - G_SYN_CHALLENGE_ENABLED=0: kernel replies bad-ACK SYN-ACK via XDP_TX, spoofed sources stay silent, live clients answer RST with secret echo -> challenge_verified (LRU, sliding TTL); brute-force of marker impossible - maps challenge_verified/challenge_pending, STAT_CHALLENGE_*, all logic in xdp/core/syn_challenge.h (221 lines) XDP diagnostics (src/xdp/diagnostics.rs): - EnvironmentReport: kernel version/BTF/driver->AttachMode verdict, fail-fast before load on unsupported kernels; wired into CLI - SystemProbe trait for kernel-less testing fix: .gitignore 'bin/' matched src/bin/ — rampart.rs was never committed cargo build/clippy(-D warnings, --features xdp)/test green: 107 tests
47 lines
406 B
Text
47 lines
406 B
Text
# Rust
|
|
target/
|
|
**/*.rs.bk
|
|
# Cargo.lock is tracked for application reproducibility
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.py[cod]
|
|
*.so
|
|
venv/
|
|
.venv/
|
|
|
|
# Node
|
|
node_modules/
|
|
npm-debug.log*
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# IDE
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
|
|
# Build
|
|
*.o
|
|
*.a
|
|
*.dylib
|
|
*.dll
|
|
*.exe
|
|
*.lib
|
|
*.so
|
|
*.d
|
|
|
|
*.jar
|
|
|
|
# Eclipse / IDE
|
|
.classpath
|
|
.project
|
|
.settings/
|
|
.factorypath
|
|
/bin/
|
|
|
|
# Reference projects (cloned for research)
|
|
ref/
|