-
Notifications
You must be signed in to change notification settings - Fork 293
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Enable telemetry logs for services using AppSec #7534
Merged
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
a4df16d
to
7865c85
Compare
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 51 metrics, 12 unstable metrics. Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.39.0-SNAPSHOT~7865c85a8d, baseline=1.39.0-SNAPSHOT~6025023dd6
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.05 s) : 0, 1050495
Total [baseline] (8.487 s) : 0, 8486880
Agent [candidate] (1.049 s) : 0, 1048760
Total [candidate] (8.496 s) : 0, 8495622
section iast
Agent [baseline] (1.18 s) : 0, 1180253
Total [baseline] (8.951 s) : 0, 8951042
Agent [candidate] (1.172 s) : 0, 1172210
Total [candidate] (8.941 s) : 0, 8940615
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.182 s) : 0, 1181856
Total [baseline] (8.92 s) : 0, 8920341
Agent [candidate] (1.175 s) : 0, 1175286
Total [candidate] (8.949 s) : 0, 8948546
section iast_TELEMETRY_OFF
Agent [baseline] (1.179 s) : 0, 1178614
Total [baseline] (9.008 s) : 0, 9008463
Agent [candidate] (1.18 s) : 0, 1179923
Total [candidate] (8.944 s) : 0, 8943592
gantt
title insecure-bank - break down per module: candidate=1.39.0-SNAPSHOT~7865c85a8d, baseline=1.39.0-SNAPSHOT~6025023dd6
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (670.333 ms) : 0, 670333
BytebuddyAgent [candidate] (669.007 ms) : 0, 669007
GlobalTracer [baseline] (307.053 ms) : 0, 307053
GlobalTracer [candidate] (306.494 ms) : 0, 306494
AppSec [baseline] (51.358 ms) : 0, 51358
AppSec [candidate] (51.525 ms) : 0, 51525
Remote Config [baseline] (670.1 µs) : 0, 670
Remote Config [candidate] (668.677 µs) : 0, 669
Telemetry [baseline] (7.451 ms) : 0, 7451
Telemetry [candidate] (7.476 ms) : 0, 7476
section iast
BytebuddyAgent [baseline] (784.871 ms) : 0, 784871
BytebuddyAgent [candidate] (779.109 ms) : 0, 779109
GlobalTracer [baseline] (297.309 ms) : 0, 297309
GlobalTracer [candidate] (294.985 ms) : 0, 294985
AppSec [baseline] (53.773 ms) : 0, 53773
AppSec [candidate] (51.365 ms) : 0, 51365
IAST [baseline] (22.674 ms) : 0, 22674
IAST [candidate] (24.439 ms) : 0, 24439
Remote Config [baseline] (580.182 µs) : 0, 580
Remote Config [candidate] (599.93 µs) : 0, 600
Telemetry [baseline] (7.327 ms) : 0, 7327
Telemetry [candidate] (8.082 ms) : 0, 8082
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (785.405 ms) : 0, 785405
BytebuddyAgent [candidate] (780.448 ms) : 0, 780448
GlobalTracer [baseline] (298.015 ms) : 0, 298015
GlobalTracer [candidate] (296.65 ms) : 0, 296650
AppSec [baseline] (53.918 ms) : 0, 53918
AppSec [candidate] (52.132 ms) : 0, 52132
IAST [baseline] (22.805 ms) : 0, 22805
IAST [candidate] (23.622 ms) : 0, 23622
Remote Config [baseline] (590.283 µs) : 0, 590
Remote Config [candidate] (591.003 µs) : 0, 591
Telemetry [baseline] (7.414 ms) : 0, 7414
Telemetry [candidate] (8.162 ms) : 0, 8162
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (783.449 ms) : 0, 783449
BytebuddyAgent [candidate] (784.333 ms) : 0, 784333
GlobalTracer [baseline] (298.106 ms) : 0, 298106
GlobalTracer [candidate] (298.044 ms) : 0, 298044
AppSec [baseline] (53.983 ms) : 0, 53983
AppSec [candidate] (54.412 ms) : 0, 54412
IAST [baseline] (21.567 ms) : 0, 21567
IAST [candidate] (21.612 ms) : 0, 21612
Remote Config [baseline] (576.308 µs) : 0, 576
Remote Config [candidate] (570.216 µs) : 0, 570
Telemetry [baseline] (7.2 ms) : 0, 7200
Telemetry [candidate] (7.151 ms) : 0, 7151
Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.39.0-SNAPSHOT~7865c85a8d, baseline=1.39.0-SNAPSHOT~6025023dd6
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.049 s) : 0, 1048669
Total [baseline] (10.353 s) : 0, 10352842
Agent [candidate] (1.057 s) : 0, 1056913
Total [candidate] (10.392 s) : 0, 10391873
section appsec
Agent [baseline] (1.188 s) : 0, 1187975
Total [baseline] (10.566 s) : 0, 10565550
Agent [candidate] (1.179 s) : 0, 1178707
Total [candidate] (10.611 s) : 0, 10610567
section iast
Agent [baseline] (1.177 s) : 0, 1176972
Total [baseline] (10.83 s) : 0, 10829644
Agent [candidate] (1.172 s) : 0, 1172422
Total [candidate] (10.753 s) : 0, 10753338
section profiling
Agent [baseline] (1.245 s) : 0, 1245211
Total [baseline] (10.609 s) : 0, 10609142
Agent [candidate] (1.246 s) : 0, 1245578
Total [candidate] (10.606 s) : 0, 10606384
gantt
title petclinic - break down per module: candidate=1.39.0-SNAPSHOT~7865c85a8d, baseline=1.39.0-SNAPSHOT~6025023dd6
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (669.132 ms) : 0, 669132
BytebuddyAgent [candidate] (674.495 ms) : 0, 674495
GlobalTracer [baseline] (306.6 ms) : 0, 306600
GlobalTracer [candidate] (308.548 ms) : 0, 308548
AppSec [baseline] (51.248 ms) : 0, 51248
AppSec [candidate] (51.934 ms) : 0, 51934
Remote Config [baseline] (667.837 µs) : 0, 668
Remote Config [candidate] (672.867 µs) : 0, 673
Telemetry [baseline] (7.458 ms) : 0, 7458
Telemetry [candidate] (7.563 ms) : 0, 7563
section appsec
BytebuddyAgent [baseline] (692.684 ms) : 0, 692684
BytebuddyAgent [candidate] (686.835 ms) : 0, 686835
GlobalTracer [baseline] (302.47 ms) : 0, 302470
GlobalTracer [candidate] (299.691 ms) : 0, 299691
AppSec [baseline] (159.48 ms) : 0, 159480
AppSec [candidate] (158.825 ms) : 0, 158825
IAST [baseline] (21.03 ms) : 0, 21030
IAST [candidate] (19.217 ms) : 0, 19217
Remote Config [baseline] (615.831 µs) : 0, 616
Remote Config [candidate] (613.008 µs) : 0, 613
Telemetry [baseline] (8.541 ms) : 0, 8541
Telemetry [candidate] (9.585 ms) : 0, 9585
section iast
BytebuddyAgent [baseline] (784.062 ms) : 0, 784062
BytebuddyAgent [candidate] (779.116 ms) : 0, 779116
GlobalTracer [baseline] (295.337 ms) : 0, 295337
GlobalTracer [candidate] (295.61 ms) : 0, 295610
AppSec [baseline] (52.945 ms) : 0, 52945
AppSec [candidate] (51.802 ms) : 0, 51802
IAST [baseline] (23.085 ms) : 0, 23085
IAST [candidate] (23.6 ms) : 0, 23600
Remote Config [baseline] (580.591 µs) : 0, 581
Remote Config [candidate] (595.267 µs) : 0, 595
Telemetry [baseline] (7.288 ms) : 0, 7288
Telemetry [candidate] (8.106 ms) : 0, 8106
section profiling
BytebuddyAgent [baseline] (662.701 ms) : 0, 662701
BytebuddyAgent [candidate] (663.537 ms) : 0, 663537
GlobalTracer [baseline] (389.091 ms) : 0, 389091
GlobalTracer [candidate] (388.587 ms) : 0, 388587
AppSec [baseline] (51.912 ms) : 0, 51912
AppSec [candidate] (51.887 ms) : 0, 51887
Remote Config [baseline] (676.932 µs) : 0, 677
Remote Config [candidate] (679.44 µs) : 0, 679
Telemetry [baseline] (7.349 ms) : 0, 7349
Telemetry [candidate] (7.344 ms) : 0, 7344
ProfilingAgent [baseline] (95.767 ms) : 0, 95767
ProfilingAgent [candidate] (95.659 ms) : 0, 95659
Profiling [baseline] (95.79 ms) : 0, 95790
Profiling [candidate] (95.684 ms) : 0, 95684
LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 18 unstable metrics. Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.39.0-SNAPSHOT~7865c85a8d, baseline=1.39.0-SNAPSHOT~6025023dd6
dateFormat X
axisFormat %s
section baseline
no_agent (364.081 µs) : 345, 384
. : milestone, 364,
iast (476.65 µs) : 454, 499
. : milestone, 477,
iast_FULL (544.619 µs) : 523, 566
. : milestone, 545,
iast_GLOBAL (497.104 µs) : 476, 518
. : milestone, 497,
iast_HARDCODED_SECRET_DISABLED (477.518 µs) : 455, 500
. : milestone, 478,
iast_INACTIVE (455.178 µs) : 434, 476
. : milestone, 455,
iast_TELEMETRY_OFF (464.908 µs) : 443, 487
. : milestone, 465,
tracing (431.437 µs) : 411, 452
. : milestone, 431,
section candidate
no_agent (366.938 µs) : 347, 387
. : milestone, 367,
iast (477.929 µs) : 456, 499
. : milestone, 478,
iast_FULL (542.156 µs) : 521, 563
. : milestone, 542,
iast_GLOBAL (505.911 µs) : 484, 528
. : milestone, 506,
iast_HARDCODED_SECRET_DISABLED (482.953 µs) : 460, 505
. : milestone, 483,
iast_INACTIVE (443.825 µs) : 423, 465
. : milestone, 444,
iast_TELEMETRY_OFF (476.572 µs) : 453, 500
. : milestone, 477,
tracing (446.456 µs) : 426, 467
. : milestone, 446,
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.39.0-SNAPSHOT~7865c85a8d, baseline=1.39.0-SNAPSHOT~6025023dd6
dateFormat X
axisFormat %s
section baseline
no_agent (1.355 ms) : 1335, 1375
. : milestone, 1355,
appsec (1.707 ms) : 1684, 1731
. : milestone, 1707,
appsec_no_iast (1.695 ms) : 1670, 1720
. : milestone, 1695,
iast (1.464 ms) : 1442, 1486
. : milestone, 1464,
profiling (1.483 ms) : 1460, 1506
. : milestone, 1483,
tracing (1.457 ms) : 1433, 1481
. : milestone, 1457,
section candidate
no_agent (1.321 ms) : 1301, 1340
. : milestone, 1321,
appsec (1.693 ms) : 1669, 1717
. : milestone, 1693,
appsec_no_iast (1.718 ms) : 1695, 1742
. : milestone, 1718,
iast (1.462 ms) : 1439, 1484
. : milestone, 1462,
profiling (1.514 ms) : 1489, 1539
. : milestone, 1514,
tracing (1.466 ms) : 1442, 1490
. : milestone, 1466,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics. Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.39.0-SNAPSHOT~7865c85a8d, baseline=1.39.0-SNAPSHOT~6025023dd6
dateFormat X
axisFormat %s
section baseline
no_agent (15.451 s) : 15451000, 15451000
. : milestone, 15451000,
appsec (15.16 s) : 15160000, 15160000
. : milestone, 15160000,
iast (18.785 s) : 18785000, 18785000
. : milestone, 18785000,
iast_GLOBAL (18.032 s) : 18032000, 18032000
. : milestone, 18032000,
profiling (15.64 s) : 15640000, 15640000
. : milestone, 15640000,
tracing (14.887 s) : 14887000, 14887000
. : milestone, 14887000,
section candidate
no_agent (15.436 s) : 15436000, 15436000
. : milestone, 15436000,
appsec (15.02 s) : 15020000, 15020000
. : milestone, 15020000,
iast (18.671 s) : 18671000, 18671000
. : milestone, 18671000,
iast_GLOBAL (17.837 s) : 17837000, 17837000
. : milestone, 17837000,
profiling (14.965 s) : 14965000, 14965000
. : milestone, 14965000,
tracing (14.774 s) : 14774000, 14774000
. : milestone, 14774000,
Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.39.0-SNAPSHOT~7865c85a8d, baseline=1.39.0-SNAPSHOT~6025023dd6
dateFormat X
axisFormat %s
section baseline
no_agent (1.463 ms) : 1452, 1474
. : milestone, 1463,
appsec (2.219 ms) : 2185, 2254
. : milestone, 2219,
iast (1.974 ms) : 1931, 2017
. : milestone, 1974,
iast_GLOBAL (2.029 ms) : 1985, 2073
. : milestone, 2029,
profiling (1.872 ms) : 1838, 1906
. : milestone, 1872,
tracing (1.838 ms) : 1806, 1871
. : milestone, 1838,
section candidate
no_agent (1.462 ms) : 1450, 1473
. : milestone, 1462,
appsec (2.249 ms) : 2214, 2285
. : milestone, 2249,
iast (1.974 ms) : 1932, 2016
. : milestone, 1974,
iast_GLOBAL (2.027 ms) : 1983, 2071
. : milestone, 2027,
profiling (1.882 ms) : 1847, 1917
. : milestone, 1882,
tracing (1.847 ms) : 1814, 1881
. : milestone, 1847,
|
PerfectSlayer
approved these changes
Aug 30, 2024
4 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What Does This Do
Default telemetry logs to enabled for services with
DD_APPSEC_ENABLED=true
.Motivation
As we rollout Exploit Prevention, we'd like to be sure to catch any unexpected error.
Additional Notes
Contributor Checklist
type:
and (comp:
orinst:
) labels in addition to any usefull labelsclose
,fix
or any linking keywords when referencing an issue.Use
solves
instead, and assign the PR milestone to the issue[ ] Update the public documentation in case of new configuration flag or behavior