Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add support for endpoint discovery in spring mvc #8352

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from
Draft

Add support for endpoint discovery in spring mvc #8352

wants to merge 1 commit into from

Conversation

manuel-alvarez-alvarez
Copy link
Member

@manuel-alvarez-alvarez manuel-alvarez-alvarez commented Feb 7, 2025 •
edited by jira bot
Loading

What Does This Do

Motivation

Additional Notes

Contributor Checklist

Jira ticket: APPSEC-56437

@manuel-alvarez-alvarez manuel-alvarez-alvarez added comp: asm waf Application Security Management (WAF) inst: spring Spring instrumentation type: enhancement labels Feb 7, 2025
@pr-commenter
Copy link

pr-commenter bot commented Feb 7, 2025 •
edited
Loading

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/waf-endpoint-discovery-spring
git_commit_date 1738853998 1738922759
git_commit_sha 8a74e85 e92e233
release_version 1.47.0-SNAPSHOT~8a74e85918 1.47.0-SNAPSHOT~e92e23345d
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1738925227 1738925227
ci_job_id 798607067 798607067
ci_pipeline_id 55221004 55221004
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-y6rmcbk--project-304-concurrent-0-i0c84spl 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux Linux runner-y6rmcbk--project-304-concurrent-0-i0c84spl 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None
variant iast iast

Summary

Found 1 performance improvements and 1 performance regressions! Performance is the same for 56 metrics, 5 unstable metrics.

scenario Δ mean execution_time candidate mean execution_time baseline mean execution_time
scenario:startup:insecure-bank:tracing:Remote Config worse
[+18.970µs; +45.991µs] or [+2.696%; +6.537%]		 736.037µs 703.556µs
scenario:startup:petclinic:profiling:Remote Config better
[-84.485µs; -36.900µs] or [-11.920%; -5.206%]		 648.102µs 708.795µs
Startup time reports for insecure-bank 
gantt
    title insecure-bank - global startup overhead: candidate=1.47.0-SNAPSHOT~e92e23345d, baseline=1.47.0-SNAPSHOT~8a74e85918

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.044 s) : 0, 1044246
Total [baseline] (8.681 s) : 0, 8680862
Agent [candidate] (1.049 s) : 0, 1049428
Total [candidate] (8.639 s) : 0, 8638754
section iast
Agent [baseline] (1.173 s) : 0, 1172575
Total [baseline] (9.23 s) : 0, 9230089
Agent [candidate] (1.174 s) : 0, 1174030
Total [candidate] (9.249 s) : 0, 9249335
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.171 s) : 0, 1170916
Total [baseline] (9.201 s) : 0, 9200585
Agent [candidate] (1.177 s) : 0, 1177118
Total [candidate] (9.206 s) : 0, 9206394
section iast_TELEMETRY_OFF
Agent [baseline] (1.169 s) : 0, 1169189
Total [baseline] (9.205 s) : 0, 9205210
Agent [candidate] (1.18 s) : 0, 1179748
Total [candidate] (9.235 s) : 0, 9235178
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.044 s -
Agent iast 1.173 s 128.329 ms (12.3%)
Agent iast_HARDCODED_SECRET_DISABLED 1.171 s 126.67 ms (12.1%)
Agent iast_TELEMETRY_OFF 1.169 s 124.943 ms (12.0%)
Total tracing 8.681 s -
Total iast 9.23 s 549.227 ms (6.3%)
Total iast_HARDCODED_SECRET_DISABLED 9.201 s 519.723 ms (6.0%)
Total iast_TELEMETRY_OFF 9.205 s 524.348 ms (6.0%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.049 s -
Agent iast 1.174 s 124.602 ms (11.9%)
Agent iast_HARDCODED_SECRET_DISABLED 1.177 s 127.69 ms (12.2%)
Agent iast_TELEMETRY_OFF 1.18 s 130.32 ms (12.4%)
Total tracing 8.639 s -
Total iast 9.249 s 610.581 ms (7.1%)
Total iast_HARDCODED_SECRET_DISABLED 9.206 s 567.64 ms (6.6%)
Total iast_TELEMETRY_OFF 9.235 s 596.424 ms (6.9%) 
gantt
    title insecure-bank - break down per module: candidate=1.47.0-SNAPSHOT~e92e23345d, baseline=1.47.0-SNAPSHOT~8a74e85918

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (717.454 ms) : 0, 717454
BytebuddyAgent [candidate] (722.7 ms) : 0, 722700
GlobalTracer [baseline] (242.894 ms) : 0, 242894
GlobalTracer [candidate] (243.846 ms) : 0, 243846
AppSec [baseline] (55.011 ms) : 0, 55011
AppSec [candidate] (55.496 ms) : 0, 55496
Remote Config [baseline] (703.556 µs) : 0, 704
Remote Config [candidate] (736.037 µs) : 0, 736
Telemetry [baseline] (12.976 ms) : 0, 12976
Telemetry [candidate] (11.389 ms) : 0, 11389
section iast
BytebuddyAgent [baseline] (834.966 ms) : 0, 834966
BytebuddyAgent [candidate] (835.93 ms) : 0, 835930
GlobalTracer [baseline] (233.18 ms) : 0, 233180
GlobalTracer [candidate] (233.312 ms) : 0, 233312
AppSec [baseline] (57.03 ms) : 0, 57030
AppSec [candidate] (57.41 ms) : 0, 57410
Remote Config [baseline] (620.702 µs) : 0, 621
Remote Config [candidate] (611.98 µs) : 0, 612
Telemetry [baseline] (8.718 ms) : 0, 8718
Telemetry [candidate] (8.746 ms) : 0, 8746
IAST [baseline] (22.808 ms) : 0, 22808
IAST [candidate] (22.843 ms) : 0, 22843
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (833.569 ms) : 0, 833569
BytebuddyAgent [candidate] (839.622 ms) : 0, 839622
GlobalTracer [baseline] (233.452 ms) : 0, 233452
GlobalTracer [candidate] (233.064 ms) : 0, 233064
AppSec [baseline] (56.535 ms) : 0, 56535
AppSec [candidate] (57.034 ms) : 0, 57034
Remote Config [baseline] (618.618 µs) : 0, 619
Remote Config [candidate] (606.218 µs) : 0, 606
Telemetry [baseline] (8.737 ms) : 0, 8737
Telemetry [candidate] (8.71 ms) : 0, 8710
IAST [baseline] (22.79 ms) : 0, 22790
IAST [candidate] (22.656 ms) : 0, 22656
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (832.012 ms) : 0, 832012
BytebuddyAgent [candidate] (839.617 ms) : 0, 839617
GlobalTracer [baseline] (233.224 ms) : 0, 233224
GlobalTracer [candidate] (235.238 ms) : 0, 235238
AppSec [baseline] (55.567 ms) : 0, 55567
AppSec [candidate] (55.343 ms) : 0, 55343
Remote Config [baseline] (618.245 µs) : 0, 618
Remote Config [candidate] (602.673 µs) : 0, 603
Telemetry [baseline] (8.615 ms) : 0, 8615
Telemetry [candidate] (8.757 ms) : 0, 8757
IAST [baseline] (23.937 ms) : 0, 23937
IAST [candidate] (24.888 ms) : 0, 24888
Loading
Startup time reports for petclinic 
gantt
    title petclinic - global startup overhead: candidate=1.47.0-SNAPSHOT~e92e23345d, baseline=1.47.0-SNAPSHOT~8a74e85918

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.044 s) : 0, 1043579
Total [baseline] (10.468 s) : 0, 10467552
Agent [candidate] (1.048 s) : 0, 1047525
Total [candidate] (10.6 s) : 0, 10599647
section appsec
Agent [baseline] (1.192 s) : 0, 1192039
Total [baseline] (10.73 s) : 0, 10730108
Agent [candidate] (1.191 s) : 0, 1191445
Total [candidate] (10.76 s) : 0, 10760110
section iast
Agent [baseline] (1.174 s) : 0, 1173903
Total [baseline] (10.943 s) : 0, 10942797
Agent [candidate] (1.173 s) : 0, 1172634
Total [candidate] (11.072 s) : 0, 11071808
section profiling
Agent [baseline] (1.28 s) : 0, 1280117
Total [baseline] (10.823 s) : 0, 10822807
Agent [candidate] (1.263 s) : 0, 1263060
Total [candidate] (10.899 s) : 0, 10899383
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.044 s -
Agent appsec 1.192 s 148.46 ms (14.2%)
Agent iast 1.174 s 130.324 ms (12.5%)
Agent profiling 1.28 s 236.538 ms (22.7%)
Total tracing 10.468 s -
Total appsec 10.73 s 262.556 ms (2.5%)
Total iast 10.943 s 475.245 ms (4.5%)
Total profiling 10.823 s 355.256 ms (3.4%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.048 s -
Agent appsec 1.191 s 143.92 ms (13.7%)
Agent iast 1.173 s 125.109 ms (11.9%)
Agent profiling 1.263 s 215.535 ms (20.6%)
Total tracing 10.6 s -
Total appsec 10.76 s 160.463 ms (1.5%)
Total iast 11.072 s 472.161 ms (4.5%)
Total profiling 10.899 s 299.736 ms (2.8%) 
gantt
    title petclinic - break down per module: candidate=1.47.0-SNAPSHOT~e92e23345d, baseline=1.47.0-SNAPSHOT~8a74e85918

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (717.363 ms) : 0, 717363
BytebuddyAgent [candidate] (717.277 ms) : 0, 717277
GlobalTracer [baseline] (243.398 ms) : 0, 243398
GlobalTracer [candidate] (243.368 ms) : 0, 243368
AppSec [baseline] (55.455 ms) : 0, 55455
AppSec [candidate] (55.872 ms) : 0, 55872
Remote Config [baseline] (710.226 µs) : 0, 710
Remote Config [candidate] (743.308 µs) : 0, 743
Telemetry [baseline] (11.417 ms) : 0, 11417
Telemetry [candidate] (15.095 ms) : 0, 15095
section appsec
BytebuddyAgent [baseline] (738.168 ms) : 0, 738168
BytebuddyAgent [candidate] (736.873 ms) : 0, 736873
GlobalTracer [baseline] (241.636 ms) : 0, 241636
GlobalTracer [candidate] (241.495 ms) : 0, 241495
AppSec [baseline] (177.031 ms) : 0, 177031
AppSec [candidate] (176.983 ms) : 0, 176983
Remote Config [baseline] (662.186 µs) : 0, 662
Remote Config [candidate] (674.876 µs) : 0, 675
Telemetry [baseline] (8.31 ms) : 0, 8310
Telemetry [candidate] (9.052 ms) : 0, 9052
IAST [baseline] (21.964 ms) : 0, 21964
IAST [candidate] (22.145 ms) : 0, 22145
section iast
BytebuddyAgent [baseline] (835.765 ms) : 0, 835765
BytebuddyAgent [candidate] (834.557 ms) : 0, 834557
GlobalTracer [baseline] (233.797 ms) : 0, 233797
GlobalTracer [candidate] (233.321 ms) : 0, 233321
AppSec [baseline] (56.948 ms) : 0, 56948
AppSec [candidate] (57.425 ms) : 0, 57425
Remote Config [baseline] (620.516 µs) : 0, 621
Remote Config [candidate] (605.305 µs) : 0, 605
Telemetry [baseline] (8.722 ms) : 0, 8722
Telemetry [candidate] (8.62 ms) : 0, 8620
IAST [baseline] (22.913 ms) : 0, 22913
IAST [candidate] (22.812 ms) : 0, 22812
section profiling
BytebuddyAgent [baseline] (716.528 ms) : 0, 716528
BytebuddyAgent [candidate] (706.64 ms) : 0, 706640
GlobalTracer [baseline] (357.497 ms) : 0, 357497
GlobalTracer [candidate] (353.856 ms) : 0, 353856
AppSec [baseline] (56.157 ms) : 0, 56157
AppSec [candidate] (55.325 ms) : 0, 55325
Remote Config [baseline] (708.795 µs) : 0, 709
Remote Config [candidate] (648.102 µs) : 0, 648
Telemetry [baseline] (9.035 ms) : 0, 9035
Telemetry [candidate] (8.871 ms) : 0, 8871
ProfilingAgent [baseline] (97.556 ms) : 0, 97556
ProfilingAgent [candidate] (95.496 ms) : 0, 95496
Profiling [baseline] (97.58 ms) : 0, 97580
Profiling [candidate] (95.52 ms) : 0, 95520
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
end_time 2025-02-07T10:14:39 2025-02-07T10:21:44
git_branch master malvarez/waf-endpoint-discovery-spring
git_commit_date 1738853998 1738922759
git_commit_sha 8a74e85 e92e233
release_version 1.47.0-SNAPSHOT~8a74e85918 1.47.0-SNAPSHOT~e92e23345d
start_time 2025-02-07T10:14:25 2025-02-07T10:21:30
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1738924062 1738924062
ci_job_id 798607068 798607068
ci_pipeline_id 55221004 55221004
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-qtsvxnoh-project-304-concurrent-0-ntkj031b 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux Linux runner-qtsvxnoh-project-304-concurrent-0-ntkj031b 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
variant iast iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 17 unstable metrics.

Request duration reports for insecure-bank 
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.47.0-SNAPSHOT~e92e23345d, baseline=1.47.0-SNAPSHOT~8a74e85918
    dateFormat X
    axisFormat %s
section baseline
no_agent (386.681 µs) : 366, 407
.   : milestone, 387,
iast (507.325 µs) : 486, 529
.   : milestone, 507,
iast_FULL (742.86 µs) : 721, 765
.   : milestone, 743,
iast_GLOBAL (547.727 µs) : 526, 569
.   : milestone, 548,
iast_HARDCODED_SECRET_DISABLED (504.706 µs) : 483, 526
.   : milestone, 505,
iast_INACTIVE (455.227 µs) : 434, 476
.   : milestone, 455,
iast_TELEMETRY_OFF (491.754 µs) : 469, 514
.   : milestone, 492,
tracing (452.891 µs) : 432, 474
.   : milestone, 453,
section candidate
no_agent (377.078 µs) : 357, 397
.   : milestone, 377,
iast (514.62 µs) : 492, 538
.   : milestone, 515,
iast_FULL (736.595 µs) : 715, 759
.   : milestone, 737,
iast_GLOBAL (561.783 µs) : 539, 585
.   : milestone, 562,
iast_HARDCODED_SECRET_DISABLED (512.287 µs) : 490, 534
.   : milestone, 512,
iast_INACTIVE (463.194 µs) : 442, 485
.   : milestone, 463,
iast_TELEMETRY_OFF (495.393 µs) : 472, 518
.   : milestone, 495,
tracing (455.855 µs) : 434, 478
.   : milestone, 456,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 386.681 µs [366.439 µs, 406.922 µs] -
iast 507.325 µs [485.771 µs, 528.879 µs] 120.644 µs (31.2%)
iast_FULL 742.86 µs [720.984 µs, 764.735 µs] 356.179 µs (92.1%)
iast_GLOBAL 547.727 µs [526.061 µs, 569.393 µs] 161.047 µs (41.6%)
iast_HARDCODED_SECRET_DISABLED 504.706 µs [483.178 µs, 526.233 µs] 118.025 µs (30.5%)
iast_INACTIVE 455.227 µs [434.068 µs, 476.387 µs] 68.547 µs (17.7%)
iast_TELEMETRY_OFF 491.754 µs [469.288 µs, 514.22 µs] 105.073 µs (27.2%)
tracing 452.891 µs [432.092 µs, 473.691 µs] 66.211 µs (17.1%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 377.078 µs [356.89 µs, 397.265 µs] -
iast 514.62 µs [491.647 µs, 537.593 µs] 137.543 µs (36.5%)
iast_FULL 736.595 µs [714.565 µs, 758.624 µs] 359.517 µs (95.3%)
iast_GLOBAL 561.783 µs [538.716 µs, 584.85 µs] 184.706 µs (49.0%)
iast_HARDCODED_SECRET_DISABLED 512.287 µs [490.277 µs, 534.297 µs] 135.21 µs (35.9%)
iast_INACTIVE 463.194 µs [441.641 µs, 484.746 µs] 86.116 µs (22.8%)
iast_TELEMETRY_OFF 495.393 µs [472.387 µs, 518.4 µs] 118.316 µs (31.4%)
tracing 455.855 µs [434.067 µs, 477.643 µs] 78.778 µs (20.9%)
Request duration reports for petclinic 
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.47.0-SNAPSHOT~e92e23345d, baseline=1.47.0-SNAPSHOT~8a74e85918
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.373 ms) : 1354, 1393
.   : milestone, 1373,
appsec (1.756 ms) : 1732, 1779
.   : milestone, 1756,
appsec_no_iast (1.759 ms) : 1734, 1784
.   : milestone, 1759,
iast (1.483 ms) : 1458, 1509
.   : milestone, 1483,
profiling (1.547 ms) : 1523, 1571
.   : milestone, 1547,
tracing (1.513 ms) : 1488, 1539
.   : milestone, 1513,
section candidate
no_agent (1.359 ms) : 1339, 1379
.   : milestone, 1359,
appsec (1.765 ms) : 1742, 1789
.   : milestone, 1765,
appsec_no_iast (1.759 ms) : 1734, 1784
.   : milestone, 1759,
iast (1.502 ms) : 1477, 1527
.   : milestone, 1502,
profiling (1.503 ms) : 1480, 1526
.   : milestone, 1503,
tracing (1.494 ms) : 1470, 1518
.   : milestone, 1494,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.373 ms [1.354 ms, 1.393 ms] -
appsec 1.756 ms [1.732 ms, 1.779 ms] 382.298 µs (27.8%)
appsec_no_iast 1.759 ms [1.734 ms, 1.784 ms] 386.127 µs (28.1%)
iast 1.483 ms [1.458 ms, 1.509 ms] 110.032 µs (8.0%)
profiling 1.547 ms [1.523 ms, 1.571 ms] 173.643 µs (12.6%)
tracing 1.513 ms [1.488 ms, 1.539 ms] 140.031 µs (10.2%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.359 ms [1.339 ms, 1.379 ms] -
appsec 1.765 ms [1.742 ms, 1.789 ms] 406.173 µs (29.9%)
appsec_no_iast 1.759 ms [1.734 ms, 1.784 ms] 400.041 µs (29.4%)
iast 1.502 ms [1.477 ms, 1.527 ms] 142.659 µs (10.5%)
profiling 1.503 ms [1.48 ms, 1.526 ms] 144.177 µs (10.6%)
tracing 1.494 ms [1.47 ms, 1.518 ms] 134.748 µs (9.9%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/waf-endpoint-discovery-spring
git_commit_date 1738853998 1738922759
git_commit_sha 8a74e85 e92e233
release_version 1.47.0-SNAPSHOT~8a74e85918 1.47.0-SNAPSHOT~e92e23345d
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1738924640 1738924640
ci_job_id 798607069 798607069
ci_pipeline_id 55221004 55221004
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-y6rmcbk--project-304-concurrent-1-03yww3dg 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux Linux runner-y6rmcbk--project-304-concurrent-1-03yww3dg 6.8.0-1021-aws #23~22.04.1-Ubuntu SMP Tue Dec 10 16:50:46 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
variant appsec appsec

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for biojava 
gantt
    title biojava - execution time [CI 0.99] : candidate=1.47.0-SNAPSHOT~e92e23345d, baseline=1.47.0-SNAPSHOT~8a74e85918
    dateFormat X
    axisFormat %s
section baseline
no_agent (14.701 s) : 14701000, 14701000
.   : milestone, 14701000,
appsec (15.102 s) : 15102000, 15102000
.   : milestone, 15102000,
iast (19.041 s) : 19041000, 19041000
.   : milestone, 19041000,
iast_GLOBAL (17.982 s) : 17982000, 17982000
.   : milestone, 17982000,
profiling (15.091 s) : 15091000, 15091000
.   : milestone, 15091000,
tracing (15.131 s) : 15131000, 15131000
.   : milestone, 15131000,
section candidate
no_agent (15.229 s) : 15229000, 15229000
.   : milestone, 15229000,
appsec (15.172 s) : 15172000, 15172000
.   : milestone, 15172000,
iast (18.328 s) : 18328000, 18328000
.   : milestone, 18328000,
iast_GLOBAL (17.615 s) : 17615000, 17615000
.   : milestone, 17615000,
profiling (15.224 s) : 15224000, 15224000
.   : milestone, 15224000,
tracing (14.909 s) : 14909000, 14909000
.   : milestone, 14909000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 14.701 s [14.701 s, 14.701 s] -
appsec 15.102 s [15.102 s, 15.102 s] 401.0 ms (2.7%)
iast 19.041 s [19.041 s, 19.041 s] 4.34 s (29.5%)
iast_GLOBAL 17.982 s [17.982 s, 17.982 s] 3.281 s (22.3%)
profiling 15.091 s [15.091 s, 15.091 s] 390.0 ms (2.7%)
tracing 15.131 s [15.131 s, 15.131 s] 430.0 ms (2.9%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.229 s [15.229 s, 15.229 s] -
appsec 15.172 s [15.172 s, 15.172 s] -57.0 ms (-0.4%)
iast 18.328 s [18.328 s, 18.328 s] 3.099 s (20.3%)
iast_GLOBAL 17.615 s [17.615 s, 17.615 s] 2.386 s (15.7%)
profiling 15.224 s [15.224 s, 15.224 s] -5.0 ms (-0.0%)
tracing 14.909 s [14.909 s, 14.909 s] -320.0 ms (-2.1%)
Execution time for tomcat 
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.47.0-SNAPSHOT~e92e23345d, baseline=1.47.0-SNAPSHOT~8a74e85918
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.481 ms) : 1470, 1493
.   : milestone, 1481,
appsec (2.37 ms) : 2327, 2413
.   : milestone, 2370,
iast (2.113 ms) : 2058, 2167
.   : milestone, 2113,
iast_GLOBAL (2.157 ms) : 2101, 2212
.   : milestone, 2157,
profiling (1.985 ms) : 1940, 2030
.   : milestone, 1985,
tracing (1.947 ms) : 1905, 1989
.   : milestone, 1947,
section candidate
no_agent (1.479 ms) : 1467, 1490
.   : milestone, 1479,
appsec (2.366 ms) : 2323, 2410
.   : milestone, 2366,
iast (2.116 ms) : 2061, 2171
.   : milestone, 2116,
iast_GLOBAL (2.161 ms) : 2106, 2217
.   : milestone, 2161,
profiling (1.978 ms) : 1934, 2021
.   : milestone, 1978,
tracing (1.944 ms) : 1902, 1986
.   : milestone, 1944,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.481 ms [1.47 ms, 1.493 ms] -
appsec 2.37 ms [2.327 ms, 2.413 ms] 888.702 µs (60.0%)
iast 2.113 ms [2.058 ms, 2.167 ms] 631.408 µs (42.6%)
iast_GLOBAL 2.157 ms [2.101 ms, 2.212 ms] 675.551 µs (45.6%)
profiling 1.985 ms [1.94 ms, 2.03 ms] 503.682 µs (34.0%)
tracing 1.947 ms [1.905 ms, 1.989 ms] 466.073 µs (31.5%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.479 ms [1.467 ms, 1.49 ms] -
appsec 2.366 ms [2.323 ms, 2.41 ms] 887.336 µs (60.0%)
iast 2.116 ms [2.061 ms, 2.171 ms] 636.918 µs (43.1%)
iast_GLOBAL 2.161 ms [2.106 ms, 2.217 ms] 682.594 µs (46.2%)
profiling 1.978 ms [1.934 ms, 2.021 ms] 498.731 µs (33.7%)
tracing 1.944 ms [1.902 ms, 1.986 ms] 464.963 µs (31.4%)

@manuel-alvarez-alvarez manuel-alvarez-alvarez force-pushed the malvarez/waf-endpoint-discovery-spring branch from f1ad95d to e92e233 Compare February 7, 2025 10:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
comp: asm waf Application Security Management (WAF) inst: spring Spring instrumentation type: enhancement
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@manuel-alvarez-alvarez