Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(iast): improve overhead control logic (#8452) #8495

Merged
merged 2 commits into from
Feb 22, 2024
Merged

Conversation

gnufede
Copy link
Member

@gnufede gnufede commented Feb 22, 2024

IAST: Improve overhead control logic so the decision to analyze a request is done at span start and is saved at the span level using the core API. This should fix issues where requests were analyzed when they shouldn't be and viceversa.

  • Change(s) are motivated and described in the PR description

  • Testing strategy is described if automated tests are not included in the PR

  • Risks are described (performance impact, potential for breakage, maintainability)

  • Change is maintainable (easy to change, telemetry, documentation)

  • Library release note guidelines are followed or label changelog/no-changelog is set

  • Documentation is included (in-code, generated user docs, public corp docs)

  • Backport labels are set (if applicable)

  • If this PR changes the public interface, I've notified @DataDog/apm-tees.

  • If change touches code that signs or publishes builds or packages, or handles credentials of any kind, I've requested a review from @DataDog/security-design-and-guidance.

  • Title is accurate

  • All changes are related to the pull request's stated goal

  • Description motivates each change

  • Avoids breaking API changes

  • Testing strategy adequately addresses listed risks

  • Change is maintainable (easy to change, telemetry, documentation)

  • Release note makes sense to a user of the library

  • Author has acknowledged and discussed the performance implications of this PR as reported in the benchmarks PR comment

  • Backport labels are set in a manner that is consistent with the release branch maintenance
    policy

(cherry picked from commit 7e8aaac)

IAST: Improve overhead control logic so the decision to analyze a
request is done at span start and is saved at the span level using the
core API. This should fix issues where requests were analyzed when they
shouldn't be and viceversa.

- [x] Change(s) are motivated and described in the PR description
- [x] Testing strategy is described if automated tests are not included
in the PR
- [x] Risks are described (performance impact, potential for breakage,
maintainability)
- [x] Change is maintainable (easy to change, telemetry, documentation)
- [x] [Library release note
guidelines](https://ddtrace.readthedocs.io/en/stable/releasenotes.html)
are followed or label `changelog/no-changelog` is set
- [x] Documentation is included (in-code, generated user docs, [public
corp docs](https://github.com/DataDog/documentation/))
- [x] Backport labels are set (if
[applicable](https://ddtrace.readthedocs.io/en/latest/contributing.html#backporting))
- [x] If this PR changes the public interface, I've notified
`@DataDog/apm-tees`.
- [x] If change touches code that signs or publishes builds or packages,
or handles credentials of any kind, I've requested a review from
`@DataDog/security-design-and-guidance`.

- [x] Title is accurate
- [x] All changes are related to the pull request's stated goal
- [x] Description motivates each change
- [x] Avoids breaking
[API](https://ddtrace.readthedocs.io/en/stable/versioning.html#interfaces)
changes
- [x] Testing strategy adequately addresses listed risks
- [x] Change is maintainable (easy to change, telemetry, documentation)
- [x] Release note makes sense to a user of the library
- [x] Author has acknowledged and discussed the performance implications
of this PR as reported in the benchmarks PR comment
- [x] Backport labels are set in a manner that is consistent with the
[release branch maintenance
policy](https://ddtrace.readthedocs.io/en/latest/contributing.html#backporting)

(cherry picked from commit 7e8aaac)
@gnufede gnufede requested review from a team as code owners February 22, 2024 14:21
@gnufede gnufede added the ASM Application Security Monitoring label Feb 22, 2024
@gnufede gnufede enabled auto-merge (squash) February 22, 2024 14:21
@datadog-dd-trace-py-rkomorn
Copy link

datadog-dd-trace-py-rkomorn bot commented Feb 22, 2024

Datadog Report

Branch report: backport-8452-to-2.6
Commit report: 30eb01b
Test service: dd-trace-py

✅ 0 Failed, 10874 Passed, 100219 Skipped, 30m 56.64s Total duration (1h 24m 7.35s time saved)

@gnufede gnufede merged commit 3074740 into 2.6 Feb 22, 2024
68 checks passed
@gnufede gnufede deleted the backport-8452-to-2.6 branch February 22, 2024 15:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ASM Application Security Monitoring
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants