add partial appsec processor

Author: duncanista

bottlecap/src/appsec/mod.rs

@@ -2,7 +2,7 @@ use std::env;
 
 use crate::config::Config;
 
-// pub mod processor;
+pub mod processor;
 
 #[must_use]
 pub fn is_enabled(config: &Config) -> bool {

bottlecap/src/appsec/processor.rs

@@ -0,0 +1,34 @@
+use std::sync::Arc;
+
+use crate::appsec::{get_rules, is_enabled, is_standalone};
+use crate::config::Config;
+
+use libddwaf::WafInstance;
+use tracing::{debug, info};
+
+pub struct Processor {
+    _config: Arc<Config>,
+    _handle: WafInstance,
+}
+
+impl Processor {
+    pub fn new(config: Arc<Config>) -> Result<Self, Box<dyn std::error::Error>> {
+        if !is_enabled(&config) {
+            return Err("AppSec is not enabled".into());
+        }
+        debug!("Starting ASM processor");
+
+        if is_standalone() {
+            info!(
+                "Starting ASM in standalone mode. APM tracing will be disabled for this service."
+            );
+        }
+
+        // Check if ASM can run properly
+        // wafHealth
+
+        let _rules = get_rules(&config).unwrap_or_default();
+
+        Err("Not implemented".into())
+    }
+}

bottlecap/src/bin/bottlecap/main.rs

@@ -844,7 +844,8 @@ fn start_api_runtime_proxy(
         return None;
     }
 
+    let config = config.clone();
     let aws_config = aws_config.clone();
     let invocation_processor = invocation_processor.clone();
-    interceptor::start(aws_config, invocation_processor).ok()
+    interceptor::start(config, aws_config, invocation_processor).ok()
 }

bottlecap/src/lib.rs

@@ -17,6 +17,7 @@
 #![allow(clippy::cast_precision_loss)]
 #![allow(clippy::needless_pass_by_value)]
 
+pub mod appsec;
 pub mod config;
 pub mod event_bus;
 pub mod events;