Skip to content

feat: add f5 support for cdn-logs-analysis and cdn-logs-report#2572

Draft
ctinp wants to merge 1 commit into
mainfrom
f5-cdn-audits
Draft

feat: add f5 support for cdn-logs-analysis and cdn-logs-report#2572
ctinp wants to merge 1 commit into
mainfrom
f5-cdn-audits

Conversation

@ctinp

@ctinp ctinp commented May 28, 2026

Copy link
Copy Markdown
Contributor

Adds initial F5 support for cdn-log-analysis and cdn-logs-report.

What changed

  • added F5 provider support and SQL queries under src/cdn-analysis/sql/f5
  • mapped the F5 access-log fields needed by the existing aggregation pipeline:
    req_path, req_params, user_agent, referer, rsp_code, domain, time_to_first_downstream_tx_byte
  • reconstructs the full URL from path + query params for referral detection
  • uses the S3 partition (year/month/day/hour) as the current source of truth for request time
  • aligns the URL extension heuristics with Imperva
  • documents open follow-ups in the raw-table SQL for when we get a real customer F5 sample:
    timestamp field, content-type field, host fallback behavior, and whether TTFB is in seconds or milliseconds

Testing

  • added/updated handler coverage for F5
  • npx mocha -i -g 'Post-Deploy' --spec=test/audits/cdn-analysis/handler.test.js passes

@github-actions

Copy link
Copy Markdown
Contributor

This PR will trigger a minor release when merged.

@ctinp ctinp marked this pull request as draft May 28, 2026 09:52
@codecov

codecov Bot commented May 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant