Extended appsec request body collection #8748

jandro996 · 2025-04-29T10:15:56Z

What Does This Do

Adds the APPSEC_RASP_COLLECT_REQUEST_BODY flag, which enables collection of request body. This feature is disabled by default.

if APPSEC_RASP_COLLECT_REQUEST_BODY is enabled and there is a RASP event put the same parsed request body that is sent to the WAF via meta_struct with http.request.body key

Add limits to maximun size String in ObjectIntrospection, if a limit is surpassed boolean tag _dd.appsec.rasp.request_body_size.exceeded is added

Motivation

Additional Notes

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any usefull labels
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
Update the public documentation in case of new configuration flag or behavior

Jira ticket: APPSEC-57268

pr-commenter · 2025-04-29T10:57:20Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	alejandro.gonzalez/WaPo-request-body
git_commit_date	1746744662	1746772641
git_commit_sha	`d8111df`	`5067ac7`
release_version	1.50.0-SNAPSHOT~d8111df5c7	1.49.0-SNAPSHOT~5067ac7755

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1746775805	1746775805
ci_job_id	930872707	930872707
ci_pipeline_id	64597842	64597842
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-cs2grmyn-project-304-concurrent-0-7xi62wbf 6.8.0-1027-aws #29~22.04.1-Ubuntu SMP Sun Mar 30 07:45:38 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-cs2grmyn-project-304-concurrent-0-7xi62wbf 6.8.0-1027-aws #29~22.04.1-Ubuntu SMP Sun Mar 30 07:45:38 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None
variant	iast	iast

Summary

Found 2 performance improvements and 2 performance regressions! Performance is the same for 55 metrics, 12 unstable metrics.

scenario	Δ mean execution_time	candidate mean execution_time	baseline mean execution_time
scenario:startup:insecure-bank:iast_HARDCODED_SECRET_DISABLED:AppSec	worse [+6.615ms; +9.873ms] or [+13.692%; +20.436%]	56.555ms	48.311ms
scenario:startup:petclinic:profiling:ProfilingAgent	better [-15.017ms; -12.882ms] or [-13.656%; -11.715%]	96.019ms	109.969ms
scenario:startup:petclinic:profiling:Profiling	better [-15.018ms; -12.884ms] or [-13.654%; -11.713%]	96.043ms	109.994ms
scenario:startup:petclinic:tracing:Remote Config	worse [+15.123µs; +63.007µs] or [+2.258%; +9.407%]	708.876µs	669.811µs

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.49.0-SNAPSHOT~5067ac7755, baseline=1.50.0-SNAPSHOT~d8111df5c7

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.027 s) : 0, 1027315
Total [baseline] (8.678 s) : 0, 8678183
Agent [candidate] (1.005 s) : 0, 1005036
Total [candidate] (8.614 s) : 0, 8613766
section iast
Agent [baseline] (1.146 s) : 0, 1146279
Total [baseline] (9.245 s) : 0, 9245052
Agent [candidate] (1.152 s) : 0, 1152299
Total [candidate] (9.259 s) : 0, 9259120
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.144 s) : 0, 1144424
Total [baseline] (9.215 s) : 0, 9214611
Agent [candidate] (1.136 s) : 0, 1136356
Total [candidate] (9.182 s) : 0, 9182213
section iast_TELEMETRY_OFF
Agent [baseline] (1.16 s) : 0, 1159849
Total [baseline] (9.287 s) : 0, 9286537
Agent [candidate] (1.134 s) : 0, 1133909
Total [candidate] (9.181 s) : 0, 9180771

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.027 s	-
Agent	iast	1.146 s	118.964 ms (11.6%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.144 s	117.109 ms (11.4%)
Agent	iast_TELEMETRY_OFF	1.16 s	132.535 ms (12.9%)
Total	tracing	8.678 s	-
Total	iast	9.245 s	566.869 ms (6.5%)
Total	iast_HARDCODED_SECRET_DISABLED	9.215 s	536.429 ms (6.2%)
Total	iast_TELEMETRY_OFF	9.287 s	608.354 ms (7.0%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.005 s	-
Agent	iast	1.152 s	147.262 ms (14.7%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.136 s	131.319 ms (13.1%)
Agent	iast_TELEMETRY_OFF	1.134 s	128.873 ms (12.8%)
Total	tracing	8.614 s	-
Total	iast	9.259 s	645.354 ms (7.5%)
Total	iast_HARDCODED_SECRET_DISABLED	9.182 s	568.447 ms (6.6%)
Total	iast_TELEMETRY_OFF	9.181 s	567.005 ms (6.6%)

gantt
    title insecure-bank - break down per module: candidate=1.49.0-SNAPSHOT~5067ac7755, baseline=1.50.0-SNAPSHOT~d8111df5c7

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (685.819 ms) : 0, 685819
BytebuddyAgent [candidate] (669.555 ms) : 0, 669555
GlobalTracer [baseline] (241.076 ms) : 0, 241076
GlobalTracer [candidate] (239.353 ms) : 0, 239353
AppSec [baseline] (54.908 ms) : 0, 54908
AppSec [candidate] (54.655 ms) : 0, 54655
Debugger [baseline] (9.121 ms) : 0, 9121
Debugger [candidate] (7.515 ms) : 0, 7515
Remote Config [baseline] (700.983 µs) : 0, 701
Remote Config [candidate] (691.633 µs) : 0, 692
Telemetry [baseline] (12.118 ms) : 0, 12118
Telemetry [candidate] (9.785 ms) : 0, 9785
section iast
BytebuddyAgent [baseline] (800.387 ms) : 0, 800387
BytebuddyAgent [candidate] (801.137 ms) : 0, 801137
GlobalTracer [baseline] (229.859 ms) : 0, 229859
GlobalTracer [candidate] (232.66 ms) : 0, 232660
AppSec [baseline] (50.234 ms) : 0, 50234
AppSec [candidate] (57.119 ms) : 0, 57119
Debugger [baseline] (5.865 ms) : 0, 5865
Debugger [candidate] (6.007 ms) : 0, 6007
Remote Config [baseline] (587.936 µs) : 0, 588
Remote Config [candidate] (598.547 µs) : 0, 599
Telemetry [baseline] (7.756 ms) : 0, 7756
Telemetry [candidate] (7.987 ms) : 0, 7987
IAST [baseline] (28.177 ms) : 0, 28177
IAST [candidate] (23.089 ms) : 0, 23089
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (798.371 ms) : 0, 798371
BytebuddyAgent [candidate] (788.937 ms) : 0, 788937
GlobalTracer [baseline] (229.974 ms) : 0, 229974
GlobalTracer [candidate] (230.128 ms) : 0, 230128
AppSec [baseline] (48.311 ms) : 0, 48311
AppSec [candidate] (56.555 ms) : 0, 56555
Debugger [baseline] (5.869 ms) : 0, 5869
Debugger [candidate] (5.871 ms) : 0, 5871
Remote Config [baseline] (582.448 µs) : 0, 582
Remote Config [candidate] (585.284 µs) : 0, 585
Telemetry [baseline] (7.864 ms) : 0, 7864
Telemetry [candidate] (7.898 ms) : 0, 7898
IAST [baseline] (30.108 ms) : 0, 30108
IAST [candidate] (22.884 ms) : 0, 22884
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (809.393 ms) : 0, 809393
BytebuddyAgent [candidate] (786.966 ms) : 0, 786966
GlobalTracer [baseline] (232.856 ms) : 0, 232856
GlobalTracer [candidate] (230.097 ms) : 0, 230097
AppSec [baseline] (54.282 ms) : 0, 54282
AppSec [candidate] (56.563 ms) : 0, 56563
Debugger [baseline] (6.031 ms) : 0, 6031
Debugger [candidate] (5.963 ms) : 0, 5963
Remote Config [baseline] (623.406 µs) : 0, 623
Remote Config [candidate] (591.248 µs) : 0, 591
Telemetry [baseline] (7.922 ms) : 0, 7922
Telemetry [candidate] (7.758 ms) : 0, 7758
IAST [baseline] (25.059 ms) : 0, 25059
IAST [candidate] (22.582 ms) : 0, 22582

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.49.0-SNAPSHOT~5067ac7755, baseline=1.50.0-SNAPSHOT~d8111df5c7

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.019 s) : 0, 1018869
Total [baseline] (10.433 s) : 0, 10433159
Agent [candidate] (1.012 s) : 0, 1012291
Total [candidate] (10.479 s) : 0, 10478925
section appsec
Agent [baseline] (1.161 s) : 0, 1161355
Total [baseline] (10.69 s) : 0, 10689846
Agent [candidate] (1.156 s) : 0, 1156018
Total [candidate] (10.682 s) : 0, 10681704
section iast
Agent [baseline] (1.148 s) : 0, 1147943
Total [baseline] (10.864 s) : 0, 10864436
Agent [candidate] (1.135 s) : 0, 1134639
Total [candidate] (10.752 s) : 0, 10751992
section profiling
Agent [baseline] (1.283 s) : 0, 1283125
Total [baseline] (10.782 s) : 0, 10781687
Agent [candidate] (1.255 s) : 0, 1255253
Total [candidate] (10.778 s) : 0, 10777741

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.019 s	-
Agent	appsec	1.161 s	142.486 ms (14.0%)
Agent	iast	1.148 s	129.074 ms (12.7%)
Agent	profiling	1.283 s	264.256 ms (25.9%)
Total	tracing	10.433 s	-
Total	appsec	10.69 s	256.686 ms (2.5%)
Total	iast	10.864 s	431.277 ms (4.1%)
Total	profiling	10.782 s	348.528 ms (3.3%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.012 s	-
Agent	appsec	1.156 s	143.727 ms (14.2%)
Agent	iast	1.135 s	122.348 ms (12.1%)
Agent	profiling	1.255 s	242.962 ms (24.0%)
Total	tracing	10.479 s	-
Total	appsec	10.682 s	202.778 ms (1.9%)
Total	iast	10.752 s	273.067 ms (2.6%)
Total	profiling	10.778 s	298.816 ms (2.9%)

gantt
    title petclinic - break down per module: candidate=1.49.0-SNAPSHOT~5067ac7755, baseline=1.50.0-SNAPSHOT~d8111df5c7

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (682.235 ms) : 0, 682235
BytebuddyAgent [candidate] (675.245 ms) : 0, 675245
GlobalTracer [baseline] (239.41 ms) : 0, 239410
GlobalTracer [candidate] (241.531 ms) : 0, 241531
AppSec [baseline] (55.12 ms) : 0, 55120
AppSec [candidate] (55.134 ms) : 0, 55134
Debugger [baseline] (9.0 ms) : 0, 9000
Debugger [candidate] (6.225 ms) : 0, 6225
Remote Config [baseline] (669.811 µs) : 0, 670
Remote Config [candidate] (708.876 µs) : 0, 709
Telemetry [baseline] (8.937 ms) : 0, 8937
Telemetry [candidate] (9.899 ms) : 0, 9899
section appsec
BytebuddyAgent [baseline] (700.559 ms) : 0, 700559
BytebuddyAgent [candidate] (692.826 ms) : 0, 692826
GlobalTracer [baseline] (236.756 ms) : 0, 236756
GlobalTracer [candidate] (237.993 ms) : 0, 237993
AppSec [baseline] (175.367 ms) : 0, 175367
AppSec [candidate] (176.263 ms) : 0, 176263
Debugger [baseline] (5.963 ms) : 0, 5963
Debugger [candidate] (5.916 ms) : 0, 5916
Remote Config [baseline] (619.918 µs) : 0, 620
Remote Config [candidate] (642.627 µs) : 0, 643
Telemetry [baseline] (7.808 ms) : 0, 7808
Telemetry [candidate] (7.806 ms) : 0, 7806
IAST [baseline] (21.582 ms) : 0, 21582
IAST [candidate] (22.089 ms) : 0, 22089
section iast
BytebuddyAgent [baseline] (801.844 ms) : 0, 801844
BytebuddyAgent [candidate] (789.036 ms) : 0, 789036
GlobalTracer [baseline] (230.229 ms) : 0, 230229
GlobalTracer [candidate] (229.609 ms) : 0, 229609
AppSec [baseline] (49.232 ms) : 0, 49232
AppSec [candidate] (55.708 ms) : 0, 55708
Debugger [baseline] (5.862 ms) : 0, 5862
Debugger [candidate] (5.814 ms) : 0, 5814
Remote Config [baseline] (584.243 µs) : 0, 584
Remote Config [candidate] (580.293 µs) : 0, 580
Telemetry [baseline] (7.768 ms) : 0, 7768
Telemetry [candidate] (7.817 ms) : 0, 7817
IAST [baseline] (27.414 ms) : 0, 27414
IAST [candidate] (22.636 ms) : 0, 22636
section profiling
BytebuddyAgent [baseline] (673.964 ms) : 0, 673964
BytebuddyAgent [candidate] (661.689 ms) : 0, 661689
GlobalTracer [baseline] (378.721 ms) : 0, 378721
GlobalTracer [candidate] (378.299 ms) : 0, 378299
AppSec [baseline] (55.056 ms) : 0, 55056
AppSec [candidate] (54.106 ms) : 0, 54106
Debugger [baseline] (6.176 ms) : 0, 6176
Debugger [candidate] (6.143 ms) : 0, 6143
Remote Config [baseline] (667.474 µs) : 0, 667
Remote Config [candidate] (658.119 µs) : 0, 658
Telemetry [baseline] (8.12 ms) : 0, 8120
Telemetry [candidate] (8.174 ms) : 0, 8174
ProfilingAgent [baseline] (109.969 ms) : 0, 109969
ProfilingAgent [candidate] (96.019 ms) : 0, 96019
Profiling [baseline] (109.994 ms) : 0, 109994
Profiling [candidate] (96.043 ms) : 0, 96043

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
end_time	2025-05-09T07:00:45	2025-05-09T07:08:27
git_branch	master	alejandro.gonzalez/WaPo-request-body
git_commit_date	1746744662	1746772641
git_commit_sha	`d8111df`	`5067ac7`
release_version	1.50.0-SNAPSHOT~d8111df5c7	1.49.0-SNAPSHOT~5067ac7755
start_time	2025-05-09T07:00:31	2025-05-09T07:08:13

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1746774902	1746774902
ci_job_id	930872708	930872708
ci_pipeline_id	64597842	64597842
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-cs2grmyn-project-304-concurrent-1-qyld3lg9 6.8.0-1027-aws #29~22.04.1-Ubuntu SMP Sun Mar 30 07:45:38 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-cs2grmyn-project-304-concurrent-1-qyld3lg9 6.8.0-1027-aws #29~22.04.1-Ubuntu SMP Sun Mar 30 07:45:38 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 18 unstable metrics.

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.49.0-SNAPSHOT~5067ac7755, baseline=1.50.0-SNAPSHOT~d8111df5c7
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.365 ms) : 1345, 1386
.   : milestone, 1365,
appsec (1.732 ms) : 1708, 1755
.   : milestone, 1732,
appsec_no_iast (1.708 ms) : 1684, 1732
.   : milestone, 1708,
code_origins (1.665 ms) : 1638, 1692
.   : milestone, 1665,
iast (1.52 ms) : 1496, 1544
.   : milestone, 1520,
profiling (1.512 ms) : 1488, 1535
.   : milestone, 1512,
tracing (1.49 ms) : 1466, 1513
.   : milestone, 1490,
section candidate
no_agent (1.37 ms) : 1351, 1389
.   : milestone, 1370,
appsec (1.714 ms) : 1690, 1737
.   : milestone, 1714,
appsec_no_iast (1.712 ms) : 1688, 1736
.   : milestone, 1712,
code_origins (1.679 ms) : 1651, 1707
.   : milestone, 1679,
iast (1.506 ms) : 1481, 1531
.   : milestone, 1506,
profiling (1.513 ms) : 1487, 1538
.   : milestone, 1513,
tracing (1.461 ms) : 1436, 1486
.   : milestone, 1461,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.365 ms [1.345 ms, 1.386 ms]	-
appsec	1.732 ms [1.708 ms, 1.755 ms]	366.192 µs (26.8%)
appsec_no_iast	1.708 ms [1.684 ms, 1.732 ms]	342.302 µs (25.1%)
code_origins	1.665 ms [1.638 ms, 1.692 ms]	299.423 µs (21.9%)
iast	1.52 ms [1.496 ms, 1.544 ms]	154.689 µs (11.3%)
profiling	1.512 ms [1.488 ms, 1.535 ms]	146.155 µs (10.7%)
tracing	1.49 ms [1.466 ms, 1.513 ms]	124.111 µs (9.1%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.37 ms [1.351 ms, 1.389 ms]	-
appsec	1.714 ms [1.69 ms, 1.737 ms]	343.859 µs (25.1%)
appsec_no_iast	1.712 ms [1.688 ms, 1.736 ms]	342.176 µs (25.0%)
code_origins	1.679 ms [1.651 ms, 1.707 ms]	309.258 µs (22.6%)
iast	1.506 ms [1.481 ms, 1.531 ms]	136.522 µs (10.0%)
profiling	1.513 ms [1.487 ms, 1.538 ms]	142.892 µs (10.4%)
tracing	1.461 ms [1.436 ms, 1.486 ms]	91.214 µs (6.7%)

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.49.0-SNAPSHOT~5067ac7755, baseline=1.50.0-SNAPSHOT~d8111df5c7
    dateFormat X
    axisFormat %s
section baseline
no_agent (373.946 µs) : 354, 394
.   : milestone, 374,
iast (526.808 µs) : 503, 550
.   : milestone, 527,
iast_FULL (730.29 µs) : 709, 752
.   : milestone, 730,
iast_GLOBAL (555.748 µs) : 534, 578
.   : milestone, 556,
iast_HARDCODED_SECRET_DISABLED (515.183 µs) : 493, 537
.   : milestone, 515,
iast_INACTIVE (475.083 µs) : 450, 500
.   : milestone, 475,
iast_TELEMETRY_OFF (508.469 µs) : 485, 532
.   : milestone, 508,
tracing (457.834 µs) : 435, 480
.   : milestone, 458,
section candidate
no_agent (382.044 µs) : 362, 402
.   : milestone, 382,
iast (522.727 µs) : 500, 546
.   : milestone, 523,
iast_FULL (726.516 µs) : 703, 750
.   : milestone, 727,
iast_GLOBAL (566.019 µs) : 541, 591
.   : milestone, 566,
iast_HARDCODED_SECRET_DISABLED (521.912 µs) : 499, 545
.   : milestone, 522,
iast_INACTIVE (466.357 µs) : 444, 489
.   : milestone, 466,
iast_TELEMETRY_OFF (509.49 µs) : 486, 533
.   : milestone, 509,
tracing (450.841 µs) : 428, 474
.   : milestone, 451,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	373.946 µs [353.974 µs, 393.918 µs]	-
iast	526.808 µs [503.362 µs, 550.254 µs]	152.861 µs (40.9%)
iast_FULL	730.29 µs [708.665 µs, 751.915 µs]	356.344 µs (95.3%)
iast_GLOBAL	555.748 µs [533.909 µs, 577.588 µs]	181.802 µs (48.6%)
iast_HARDCODED_SECRET_DISABLED	515.183 µs [493.117 µs, 537.249 µs]	141.236 µs (37.8%)
iast_INACTIVE	475.083 µs [449.885 µs, 500.282 µs]	101.137 µs (27.0%)
iast_TELEMETRY_OFF	508.469 µs [485.257 µs, 531.68 µs]	134.522 µs (36.0%)
tracing	457.834 µs [435.212 µs, 480.455 µs]	83.887 µs (22.4%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	382.044 µs [362.169 µs, 401.92 µs]	-
iast	522.727 µs [499.841 µs, 545.614 µs]	140.683 µs (36.8%)
iast_FULL	726.516 µs [703.07 µs, 749.962 µs]	344.472 µs (90.2%)
iast_GLOBAL	566.019 µs [541.287 µs, 590.751 µs]	183.975 µs (48.2%)
iast_HARDCODED_SECRET_DISABLED	521.912 µs [499.069 µs, 544.754 µs]	139.868 µs (36.6%)
iast_INACTIVE	466.357 µs [443.906 µs, 488.808 µs]	84.313 µs (22.1%)
iast_TELEMETRY_OFF	509.49 µs [485.994 µs, 532.987 µs]	127.446 µs (33.4%)
tracing	450.841 µs [427.77 µs, 473.912 µs]	68.797 µs (18.0%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	alejandro.gonzalez/WaPo-request-body
git_commit_date	1746744662	1746772641
git_commit_sha	`d8111df`	`5067ac7`
release_version	1.50.0-SNAPSHOT~d8111df5c7	1.49.0-SNAPSHOT~5067ac7755

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1746775324	1746775324
ci_job_id	930872709	930872709
ci_pipeline_id	64597842	64597842
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-cs2grmyn-project-304-concurrent-2-6jvsqgrn 6.8.0-1027-aws #29~22.04.1-Ubuntu SMP Sun Mar 30 07:45:38 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-cs2grmyn-project-304-concurrent-2-6jvsqgrn 6.8.0-1027-aws #29~22.04.1-Ubuntu SMP Sun Mar 30 07:45:38 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
variant	appsec	appsec

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.49.0-SNAPSHOT~5067ac7755, baseline=1.50.0-SNAPSHOT~d8111df5c7
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.478 ms) : 1466, 1489
.   : milestone, 1478,
appsec (2.425 ms) : 2375, 2474
.   : milestone, 2425,
iast (2.203 ms) : 2140, 2266
.   : milestone, 2203,
iast_GLOBAL (2.248 ms) : 2185, 2311
.   : milestone, 2248,
profiling (2.062 ms) : 2011, 2113
.   : milestone, 2062,
tracing (2.029 ms) : 1980, 2078
.   : milestone, 2029,
section candidate
no_agent (1.481 ms) : 1470, 1493
.   : milestone, 1481,
appsec (2.431 ms) : 2381, 2480
.   : milestone, 2431,
iast (2.199 ms) : 2136, 2261
.   : milestone, 2199,
iast_GLOBAL (2.236 ms) : 2174, 2299
.   : milestone, 2236,
profiling (2.055 ms) : 2004, 2106
.   : milestone, 2055,
tracing (2.037 ms) : 1988, 2086
.   : milestone, 2037,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.478 ms [1.466 ms, 1.489 ms]	-
appsec	2.425 ms [2.375 ms, 2.474 ms]	947.034 µs (64.1%)
iast	2.203 ms [2.14 ms, 2.266 ms]	725.466 µs (49.1%)
iast_GLOBAL	2.248 ms [2.185 ms, 2.311 ms]	770.671 µs (52.2%)
profiling	2.062 ms [2.011 ms, 2.113 ms]	584.448 µs (39.6%)
tracing	2.029 ms [1.98 ms, 2.078 ms]	551.715 µs (37.3%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.481 ms [1.47 ms, 1.493 ms]	-
appsec	2.431 ms [2.381 ms, 2.48 ms]	949.068 µs (64.1%)
iast	2.199 ms [2.136 ms, 2.261 ms]	717.049 µs (48.4%)
iast_GLOBAL	2.236 ms [2.174 ms, 2.299 ms]	754.856 µs (51.0%)
profiling	2.055 ms [2.004 ms, 2.106 ms]	573.791 µs (38.7%)
tracing	2.037 ms [1.988 ms, 2.086 ms]	555.525 µs (37.5%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.49.0-SNAPSHOT~5067ac7755, baseline=1.50.0-SNAPSHOT~d8111df5c7
    dateFormat X
    axisFormat %s
section baseline
no_agent (14.963 s) : 14963000, 14963000
.   : milestone, 14963000,
appsec (15.115 s) : 15115000, 15115000
.   : milestone, 15115000,
iast (18.742 s) : 18742000, 18742000
.   : milestone, 18742000,
iast_GLOBAL (17.843 s) : 17843000, 17843000
.   : milestone, 17843000,
profiling (15.108 s) : 15108000, 15108000
.   : milestone, 15108000,
tracing (15.053 s) : 15053000, 15053000
.   : milestone, 15053000,
section candidate
no_agent (15.465 s) : 15465000, 15465000
.   : milestone, 15465000,
appsec (14.851 s) : 14851000, 14851000
.   : milestone, 14851000,
iast (18.985 s) : 18985000, 18985000
.   : milestone, 18985000,
iast_GLOBAL (18.284 s) : 18284000, 18284000
.   : milestone, 18284000,
profiling (15.01 s) : 15010000, 15010000
.   : milestone, 15010000,
tracing (15.17 s) : 15170000, 15170000
.   : milestone, 15170000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.963 s [14.963 s, 14.963 s]	-
appsec	15.115 s [15.115 s, 15.115 s]	152.0 ms (1.0%)
iast	18.742 s [18.742 s, 18.742 s]	3.779 s (25.3%)
iast_GLOBAL	17.843 s [17.843 s, 17.843 s]	2.88 s (19.2%)
profiling	15.108 s [15.108 s, 15.108 s]	145.0 ms (1.0%)
tracing	15.053 s [15.053 s, 15.053 s]	90.0 ms (0.6%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.465 s [15.465 s, 15.465 s]	-
appsec	14.851 s [14.851 s, 14.851 s]	-614.0 ms (-4.0%)
iast	18.985 s [18.985 s, 18.985 s]	3.52 s (22.8%)
iast_GLOBAL	18.284 s [18.284 s, 18.284 s]	2.819 s (18.2%)
profiling	15.01 s [15.01 s, 15.01 s]	-455.0 ms (-2.9%)
tracing	15.17 s [15.17 s, 15.17 s]	-295.0 ms (-1.9%)

jandro996 added type: enhancement comp: asm waf Application Security Management (WAF) labels Apr 29, 2025

jandro996 force-pushed the alejandro.gonzalez/WaPo-headers branch from dc48fa1 to 761eade Compare April 30, 2025 11:32

Collect parsed request body if RASP event

5dcd1cf

jandro996 force-pushed the alejandro.gonzalez/WaPo-request-body branch from bdc855c to 5dcd1cf Compare May 8, 2025 07:07

jandro996 added 2 commits May 8, 2025 13:41

improve truncation

759ea03

wip

5067ac7

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Extended appsec request body collection #8748

Extended appsec request body collection #8748

jandro996 commented Apr 29, 2025 •

edited

Loading

pr-commenter bot commented Apr 29, 2025 •

edited

Loading

Extended appsec request body collection #8748

Are you sure you want to change the base?

Extended appsec request body collection #8748

Conversation

jandro996 commented Apr 29, 2025 • edited Loading

What Does This Do

Motivation

Additional Notes

Contributor Checklist

pr-commenter bot commented Apr 29, 2025 • edited Loading

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

jandro996 commented Apr 29, 2025 •

edited

Loading

pr-commenter bot commented Apr 29, 2025 •

edited

Loading