@serve.zone/dcrouter 11.0.35 → 11.0.37
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist_serve/bundle.js +1 -1
- package/dist_ts_web/00_commitinfo_data.js +1 -1
- package/package.json +1 -1
- package/ts/00_commitinfo_data.ts +1 -1
- package/ts_web/00_commitinfo_data.ts +1 -1
- package/dist_ts/00_commitinfo_data.d.ts +0 -8
- package/dist_ts/00_commitinfo_data.js +0 -9
- package/dist_ts/cache/classes.cache.cleaner.d.ts +0 -47
- package/dist_ts/cache/classes.cache.cleaner.js +0 -130
- package/dist_ts/cache/classes.cached.document.d.ts +0 -76
- package/dist_ts/cache/classes.cached.document.js +0 -100
- package/dist_ts/cache/classes.cachedb.d.ts +0 -60
- package/dist_ts/cache/classes.cachedb.js +0 -126
- package/dist_ts/cache/documents/classes.cached.email.d.ts +0 -125
- package/dist_ts/cache/documents/classes.cached.email.js +0 -337
- package/dist_ts/cache/documents/classes.cached.ip.reputation.d.ts +0 -119
- package/dist_ts/cache/documents/classes.cached.ip.reputation.js +0 -323
- package/dist_ts/cache/documents/index.d.ts +0 -2
- package/dist_ts/cache/documents/index.js +0 -3
- package/dist_ts/cache/index.d.ts +0 -4
- package/dist_ts/cache/index.js +0 -7
- package/dist_ts/classes.cert-provision-scheduler.d.ts +0 -53
- package/dist_ts/classes.cert-provision-scheduler.js +0 -110
- package/dist_ts/classes.storage-cert-manager.d.ts +0 -18
- package/dist_ts/classes.storage-cert-manager.js +0 -43
- package/dist_ts/errors/base.errors.js +0 -320
- package/dist_ts/errors/error.codes.d.ts +0 -115
- package/dist_ts/errors/error.codes.js +0 -136
- package/dist_ts/logger.d.ts +0 -21
- package/dist_ts/logger.js +0 -81
- package/dist_ts/monitoring/classes.metricscache.d.ts +0 -32
- package/dist_ts/monitoring/classes.metricscache.js +0 -63
- package/dist_ts/monitoring/classes.metricsmanager.d.ts +0 -178
- package/dist_ts/monitoring/classes.metricsmanager.js +0 -642
- package/dist_ts/monitoring/index.d.ts +0 -1
- package/dist_ts/monitoring/index.js +0 -2
- package/dist_ts/opsserver/classes.opsserver.d.ts +0 -37
- package/dist_ts/opsserver/classes.opsserver.js +0 -85
- package/dist_ts/opsserver/handlers/admin.handler.d.ts +0 -31
- package/dist_ts/opsserver/handlers/admin.handler.js +0 -180
- package/dist_ts/opsserver/handlers/api-token.handler.d.ts +0 -6
- package/dist_ts/opsserver/handlers/api-token.handler.js +0 -62
- package/dist_ts/opsserver/handlers/certificate.handler.d.ts +0 -32
- package/dist_ts/opsserver/handlers/certificate.handler.js +0 -421
- package/dist_ts/opsserver/handlers/config.handler.d.ts +0 -7
- package/dist_ts/opsserver/handlers/config.handler.js +0 -192
- package/dist_ts/opsserver/handlers/email-ops.handler.d.ts +0 -30
- package/dist_ts/opsserver/handlers/email-ops.handler.js +0 -227
- package/dist_ts/opsserver/handlers/index.d.ts +0 -11
- package/dist_ts/opsserver/handlers/index.js +0 -12
- package/dist_ts/opsserver/handlers/logs.handler.d.ts +0 -25
- package/dist_ts/opsserver/handlers/logs.handler.js +0 -256
- package/dist_ts/opsserver/handlers/radius.handler.d.ts +0 -6
- package/dist_ts/opsserver/handlers/radius.handler.js +0 -295
- package/dist_ts/opsserver/handlers/remoteingress.handler.d.ts +0 -6
- package/dist_ts/opsserver/handlers/remoteingress.handler.js +0 -156
- package/dist_ts/opsserver/handlers/route-management.handler.d.ts +0 -14
- package/dist_ts/opsserver/handlers/route-management.handler.js +0 -117
- package/dist_ts/opsserver/handlers/security.handler.d.ts +0 -9
- package/dist_ts/opsserver/handlers/security.handler.js +0 -231
- package/dist_ts/opsserver/handlers/stats.handler.d.ts +0 -11
- package/dist_ts/opsserver/handlers/stats.handler.js +0 -399
- package/dist_ts/opsserver/helpers/guards.d.ts +0 -27
- package/dist_ts/opsserver/helpers/guards.js +0 -43
- package/dist_ts/opsserver/index.d.ts +0 -1
- package/dist_ts/opsserver/index.js +0 -2
- package/dist_ts/paths.d.ts +0 -26
- package/dist_ts/paths.js +0 -45
- package/dist_ts/plugins.d.ts +0 -79
- package/dist_ts/plugins.js +0 -113
- package/dist_ts/radius/classes.accounting.manager.d.ts +0 -218
- package/dist_ts/radius/classes.accounting.manager.js +0 -417
- package/dist_ts/radius/classes.radius.server.d.ts +0 -171
- package/dist_ts/radius/classes.radius.server.js +0 -385
- package/dist_ts/radius/classes.vlan.manager.d.ts +0 -128
- package/dist_ts/radius/classes.vlan.manager.js +0 -279
- package/dist_ts/radius/index.d.ts +0 -13
- package/dist_ts/radius/index.js +0 -14
- package/dist_ts/remoteingress/classes.remoteingress-manager.d.ts +0 -82
- package/dist_ts/remoteingress/classes.remoteingress-manager.js +0 -227
- package/dist_ts/remoteingress/classes.tunnel-manager.d.ts +0 -59
- package/dist_ts/remoteingress/classes.tunnel-manager.js +0 -165
- package/dist_ts/remoteingress/index.d.ts +0 -2
- package/dist_ts/remoteingress/index.js +0 -3
- package/dist_ts/security/classes.securitylogger.d.ts +0 -144
- package/dist_ts/security/classes.securitylogger.js +0 -233
- package/dist_ts/storage/classes.storagemanager.d.ts +0 -83
- package/dist_ts/storage/classes.storagemanager.js +0 -350
- package/dist_ts/storage/index.d.ts +0 -1
- package/dist_ts/storage/index.js +0 -3
|
@@ -1,59 +0,0 @@
|
|
|
1
|
-
import type { IRemoteIngressStatus } from '../../dist_ts_interfaces/data/remoteingress.js';
|
|
2
|
-
import type { RemoteIngressManager } from './classes.remoteingress-manager.js';
|
|
3
|
-
export interface ITunnelManagerConfig {
|
|
4
|
-
tunnelPort?: number;
|
|
5
|
-
targetHost?: string;
|
|
6
|
-
tls?: {
|
|
7
|
-
certPem?: string;
|
|
8
|
-
keyPem?: string;
|
|
9
|
-
};
|
|
10
|
-
}
|
|
11
|
-
/**
|
|
12
|
-
* Manages the RemoteIngressHub instance and tracks connected edge statuses.
|
|
13
|
-
*/
|
|
14
|
-
export declare class TunnelManager {
|
|
15
|
-
private hub;
|
|
16
|
-
private manager;
|
|
17
|
-
private config;
|
|
18
|
-
private edgeStatuses;
|
|
19
|
-
private reconcileInterval;
|
|
20
|
-
constructor(manager: RemoteIngressManager, config?: ITunnelManagerConfig);
|
|
21
|
-
/**
|
|
22
|
-
* Start the tunnel hub and load allowed edges.
|
|
23
|
-
*/
|
|
24
|
-
start(): Promise<void>;
|
|
25
|
-
/**
|
|
26
|
-
* Stop the tunnel hub.
|
|
27
|
-
*/
|
|
28
|
-
stop(): Promise<void>;
|
|
29
|
-
/**
|
|
30
|
-
* Reconcile TS-side edge statuses with the authoritative Rust hub status.
|
|
31
|
-
* Overwrites event-derived activeTunnels with the real activeStreams count.
|
|
32
|
-
*/
|
|
33
|
-
private reconcile;
|
|
34
|
-
/**
|
|
35
|
-
* Sync allowed edges from the manager to the hub.
|
|
36
|
-
* Call this after creating/deleting/updating edges.
|
|
37
|
-
*/
|
|
38
|
-
syncAllowedEdges(): Promise<void>;
|
|
39
|
-
/**
|
|
40
|
-
* Get runtime statuses for all known edges.
|
|
41
|
-
*/
|
|
42
|
-
getEdgeStatuses(): IRemoteIngressStatus[];
|
|
43
|
-
/**
|
|
44
|
-
* Get status for a specific edge.
|
|
45
|
-
*/
|
|
46
|
-
getEdgeStatus(edgeId: string): IRemoteIngressStatus | undefined;
|
|
47
|
-
/**
|
|
48
|
-
* Get the count of connected edges.
|
|
49
|
-
*/
|
|
50
|
-
getConnectedCount(): number;
|
|
51
|
-
/**
|
|
52
|
-
* Get the public IPs of all connected edges.
|
|
53
|
-
*/
|
|
54
|
-
getConnectedEdgeIps(): string[];
|
|
55
|
-
/**
|
|
56
|
-
* Get the total number of active tunnels across all edges.
|
|
57
|
-
*/
|
|
58
|
-
getTotalActiveTunnels(): number;
|
|
59
|
-
}
|
|
@@ -1,165 +0,0 @@
|
|
|
1
|
-
import * as plugins from '../plugins.js';
|
|
2
|
-
/**
|
|
3
|
-
* Manages the RemoteIngressHub instance and tracks connected edge statuses.
|
|
4
|
-
*/
|
|
5
|
-
export class TunnelManager {
|
|
6
|
-
hub;
|
|
7
|
-
manager;
|
|
8
|
-
config;
|
|
9
|
-
edgeStatuses = new Map();
|
|
10
|
-
reconcileInterval = null;
|
|
11
|
-
constructor(manager, config = {}) {
|
|
12
|
-
this.manager = manager;
|
|
13
|
-
this.config = config;
|
|
14
|
-
this.hub = new plugins.remoteingress.RemoteIngressHub();
|
|
15
|
-
// Listen for edge connect/disconnect events
|
|
16
|
-
this.hub.on('edgeConnected', (data) => {
|
|
17
|
-
this.edgeStatuses.set(data.edgeId, {
|
|
18
|
-
edgeId: data.edgeId,
|
|
19
|
-
connected: true,
|
|
20
|
-
publicIp: data.peerAddr || null,
|
|
21
|
-
activeTunnels: 0,
|
|
22
|
-
lastHeartbeat: Date.now(),
|
|
23
|
-
connectedAt: Date.now(),
|
|
24
|
-
});
|
|
25
|
-
});
|
|
26
|
-
this.hub.on('edgeDisconnected', (data) => {
|
|
27
|
-
this.edgeStatuses.delete(data.edgeId);
|
|
28
|
-
});
|
|
29
|
-
this.hub.on('streamOpened', (data) => {
|
|
30
|
-
const existing = this.edgeStatuses.get(data.edgeId);
|
|
31
|
-
if (existing) {
|
|
32
|
-
existing.activeTunnels++;
|
|
33
|
-
existing.lastHeartbeat = Date.now();
|
|
34
|
-
}
|
|
35
|
-
});
|
|
36
|
-
this.hub.on('streamClosed', (data) => {
|
|
37
|
-
const existing = this.edgeStatuses.get(data.edgeId);
|
|
38
|
-
if (existing && existing.activeTunnels > 0) {
|
|
39
|
-
existing.activeTunnels--;
|
|
40
|
-
}
|
|
41
|
-
});
|
|
42
|
-
}
|
|
43
|
-
/**
|
|
44
|
-
* Start the tunnel hub and load allowed edges.
|
|
45
|
-
*/
|
|
46
|
-
async start() {
|
|
47
|
-
await this.hub.start({
|
|
48
|
-
tunnelPort: this.config.tunnelPort ?? 8443,
|
|
49
|
-
targetHost: this.config.targetHost ?? '127.0.0.1',
|
|
50
|
-
tls: this.config.tls,
|
|
51
|
-
});
|
|
52
|
-
// Send allowed edges to the hub
|
|
53
|
-
await this.syncAllowedEdges();
|
|
54
|
-
// Periodically reconcile with authoritative Rust hub status
|
|
55
|
-
this.reconcileInterval = setInterval(() => {
|
|
56
|
-
this.reconcile().catch(() => { });
|
|
57
|
-
}, 15_000);
|
|
58
|
-
}
|
|
59
|
-
/**
|
|
60
|
-
* Stop the tunnel hub.
|
|
61
|
-
*/
|
|
62
|
-
async stop() {
|
|
63
|
-
if (this.reconcileInterval) {
|
|
64
|
-
clearInterval(this.reconcileInterval);
|
|
65
|
-
this.reconcileInterval = null;
|
|
66
|
-
}
|
|
67
|
-
// Remove event listeners before stopping to prevent leaks
|
|
68
|
-
this.hub.removeAllListeners();
|
|
69
|
-
await this.hub.stop();
|
|
70
|
-
this.edgeStatuses.clear();
|
|
71
|
-
}
|
|
72
|
-
/**
|
|
73
|
-
* Reconcile TS-side edge statuses with the authoritative Rust hub status.
|
|
74
|
-
* Overwrites event-derived activeTunnels with the real activeStreams count.
|
|
75
|
-
*/
|
|
76
|
-
async reconcile() {
|
|
77
|
-
const hubStatus = await this.hub.getStatus();
|
|
78
|
-
if (!hubStatus || !hubStatus.connectedEdges)
|
|
79
|
-
return;
|
|
80
|
-
const rustEdgeIds = new Set();
|
|
81
|
-
for (const rustEdge of hubStatus.connectedEdges) {
|
|
82
|
-
rustEdgeIds.add(rustEdge.edgeId);
|
|
83
|
-
const existing = this.edgeStatuses.get(rustEdge.edgeId);
|
|
84
|
-
if (existing) {
|
|
85
|
-
existing.activeTunnels = rustEdge.activeStreams;
|
|
86
|
-
existing.lastHeartbeat = Date.now();
|
|
87
|
-
// Update peer address if available from Rust hub
|
|
88
|
-
if (rustEdge.peerAddr) {
|
|
89
|
-
existing.publicIp = rustEdge.peerAddr;
|
|
90
|
-
}
|
|
91
|
-
}
|
|
92
|
-
else {
|
|
93
|
-
// Missed edgeConnected event — add entry
|
|
94
|
-
this.edgeStatuses.set(rustEdge.edgeId, {
|
|
95
|
-
edgeId: rustEdge.edgeId,
|
|
96
|
-
connected: true,
|
|
97
|
-
publicIp: rustEdge.peerAddr || null,
|
|
98
|
-
activeTunnels: rustEdge.activeStreams,
|
|
99
|
-
lastHeartbeat: Date.now(),
|
|
100
|
-
connectedAt: rustEdge.connectedAt * 1000,
|
|
101
|
-
});
|
|
102
|
-
}
|
|
103
|
-
}
|
|
104
|
-
// Remove entries for edges no longer connected in Rust (missed edgeDisconnected)
|
|
105
|
-
for (const edgeId of this.edgeStatuses.keys()) {
|
|
106
|
-
if (!rustEdgeIds.has(edgeId)) {
|
|
107
|
-
this.edgeStatuses.delete(edgeId);
|
|
108
|
-
}
|
|
109
|
-
}
|
|
110
|
-
}
|
|
111
|
-
/**
|
|
112
|
-
* Sync allowed edges from the manager to the hub.
|
|
113
|
-
* Call this after creating/deleting/updating edges.
|
|
114
|
-
*/
|
|
115
|
-
async syncAllowedEdges() {
|
|
116
|
-
const edges = this.manager.getAllowedEdges();
|
|
117
|
-
await this.hub.updateAllowedEdges(edges);
|
|
118
|
-
}
|
|
119
|
-
/**
|
|
120
|
-
* Get runtime statuses for all known edges.
|
|
121
|
-
*/
|
|
122
|
-
getEdgeStatuses() {
|
|
123
|
-
return Array.from(this.edgeStatuses.values());
|
|
124
|
-
}
|
|
125
|
-
/**
|
|
126
|
-
* Get status for a specific edge.
|
|
127
|
-
*/
|
|
128
|
-
getEdgeStatus(edgeId) {
|
|
129
|
-
return this.edgeStatuses.get(edgeId);
|
|
130
|
-
}
|
|
131
|
-
/**
|
|
132
|
-
* Get the count of connected edges.
|
|
133
|
-
*/
|
|
134
|
-
getConnectedCount() {
|
|
135
|
-
let count = 0;
|
|
136
|
-
for (const status of this.edgeStatuses.values()) {
|
|
137
|
-
if (status.connected)
|
|
138
|
-
count++;
|
|
139
|
-
}
|
|
140
|
-
return count;
|
|
141
|
-
}
|
|
142
|
-
/**
|
|
143
|
-
* Get the public IPs of all connected edges.
|
|
144
|
-
*/
|
|
145
|
-
getConnectedEdgeIps() {
|
|
146
|
-
const ips = [];
|
|
147
|
-
for (const status of this.edgeStatuses.values()) {
|
|
148
|
-
if (status.connected && status.publicIp) {
|
|
149
|
-
ips.push(status.publicIp);
|
|
150
|
-
}
|
|
151
|
-
}
|
|
152
|
-
return ips;
|
|
153
|
-
}
|
|
154
|
-
/**
|
|
155
|
-
* Get the total number of active tunnels across all edges.
|
|
156
|
-
*/
|
|
157
|
-
getTotalActiveTunnels() {
|
|
158
|
-
let total = 0;
|
|
159
|
-
for (const status of this.edgeStatuses.values()) {
|
|
160
|
-
total += status.activeTunnels;
|
|
161
|
-
}
|
|
162
|
-
return total;
|
|
163
|
-
}
|
|
164
|
-
}
|
|
165
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,3 +0,0 @@
|
|
|
1
|
-
export * from './classes.remoteingress-manager.js';
|
|
2
|
-
export * from './classes.tunnel-manager.js';
|
|
3
|
-
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi90cy9yZW1vdGVpbmdyZXNzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLGNBQWMsb0NBQW9DLENBQUM7QUFDbkQsY0FBYyw2QkFBNkIsQ0FBQyJ9
|
|
@@ -1,144 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Log level for security events
|
|
3
|
-
*/
|
|
4
|
-
export declare enum SecurityLogLevel {
|
|
5
|
-
INFO = "info",
|
|
6
|
-
WARN = "warn",
|
|
7
|
-
ERROR = "error",
|
|
8
|
-
CRITICAL = "critical"
|
|
9
|
-
}
|
|
10
|
-
/**
|
|
11
|
-
* Security event types for categorization
|
|
12
|
-
*/
|
|
13
|
-
export declare enum SecurityEventType {
|
|
14
|
-
AUTHENTICATION = "authentication",
|
|
15
|
-
ACCESS_CONTROL = "access_control",
|
|
16
|
-
EMAIL_VALIDATION = "email_validation",
|
|
17
|
-
EMAIL_PROCESSING = "email_processing",
|
|
18
|
-
EMAIL_FORWARDING = "email_forwarding",
|
|
19
|
-
EMAIL_DELIVERY = "email_delivery",
|
|
20
|
-
DKIM = "dkim",
|
|
21
|
-
SPF = "spf",
|
|
22
|
-
DMARC = "dmarc",
|
|
23
|
-
RATE_LIMIT = "rate_limit",
|
|
24
|
-
RATE_LIMITING = "rate_limiting",
|
|
25
|
-
SPAM = "spam",
|
|
26
|
-
MALWARE = "malware",
|
|
27
|
-
CONNECTION = "connection",
|
|
28
|
-
DATA_EXPOSURE = "data_exposure",
|
|
29
|
-
CONFIGURATION = "configuration",
|
|
30
|
-
IP_REPUTATION = "ip_reputation",
|
|
31
|
-
REJECTED_CONNECTION = "rejected_connection"
|
|
32
|
-
}
|
|
33
|
-
/**
|
|
34
|
-
* Security event interface
|
|
35
|
-
*/
|
|
36
|
-
export interface ISecurityEvent {
|
|
37
|
-
timestamp: number;
|
|
38
|
-
level: SecurityLogLevel;
|
|
39
|
-
type: SecurityEventType;
|
|
40
|
-
message: string;
|
|
41
|
-
details?: any;
|
|
42
|
-
ipAddress?: string;
|
|
43
|
-
userId?: string;
|
|
44
|
-
sessionId?: string;
|
|
45
|
-
emailId?: string;
|
|
46
|
-
domain?: string;
|
|
47
|
-
action?: string;
|
|
48
|
-
result?: string;
|
|
49
|
-
success?: boolean;
|
|
50
|
-
}
|
|
51
|
-
/**
|
|
52
|
-
* Security logger for enhanced security monitoring
|
|
53
|
-
*/
|
|
54
|
-
export declare class SecurityLogger {
|
|
55
|
-
private static instance;
|
|
56
|
-
private securityEvents;
|
|
57
|
-
private maxEventHistory;
|
|
58
|
-
private enableNotifications;
|
|
59
|
-
private constructor();
|
|
60
|
-
/**
|
|
61
|
-
* Get singleton instance
|
|
62
|
-
*/
|
|
63
|
-
static getInstance(options?: {
|
|
64
|
-
maxEventHistory?: number;
|
|
65
|
-
enableNotifications?: boolean;
|
|
66
|
-
}): SecurityLogger;
|
|
67
|
-
/**
|
|
68
|
-
* Reset the singleton instance (for shutdown/testing)
|
|
69
|
-
*/
|
|
70
|
-
static resetInstance(): void;
|
|
71
|
-
/**
|
|
72
|
-
* Log a security event
|
|
73
|
-
* @param event The security event to log
|
|
74
|
-
*/
|
|
75
|
-
logEvent(event: Omit<ISecurityEvent, 'timestamp'>): void;
|
|
76
|
-
/**
|
|
77
|
-
* Get recent security events
|
|
78
|
-
* @param limit Maximum number of events to return
|
|
79
|
-
* @param filter Filter for specific event types
|
|
80
|
-
* @returns Recent security events
|
|
81
|
-
*/
|
|
82
|
-
getRecentEvents(limit?: number, filter?: {
|
|
83
|
-
level?: SecurityLogLevel;
|
|
84
|
-
type?: SecurityEventType;
|
|
85
|
-
fromTimestamp?: number;
|
|
86
|
-
toTimestamp?: number;
|
|
87
|
-
}): ISecurityEvent[];
|
|
88
|
-
/**
|
|
89
|
-
* Get events by security level
|
|
90
|
-
* @param level The security level to filter by
|
|
91
|
-
* @param limit Maximum number of events to return
|
|
92
|
-
* @returns Security events matching the level
|
|
93
|
-
*/
|
|
94
|
-
getEventsByLevel(level: SecurityLogLevel, limit?: number): ISecurityEvent[];
|
|
95
|
-
/**
|
|
96
|
-
* Get events by security type
|
|
97
|
-
* @param type The event type to filter by
|
|
98
|
-
* @param limit Maximum number of events to return
|
|
99
|
-
* @returns Security events matching the type
|
|
100
|
-
*/
|
|
101
|
-
getEventsByType(type: SecurityEventType, limit?: number): ISecurityEvent[];
|
|
102
|
-
/**
|
|
103
|
-
* Get security events for a specific IP address
|
|
104
|
-
* @param ipAddress The IP address to filter by
|
|
105
|
-
* @param limit Maximum number of events to return
|
|
106
|
-
* @returns Security events for the IP address
|
|
107
|
-
*/
|
|
108
|
-
getEventsByIP(ipAddress: string, limit?: number): ISecurityEvent[];
|
|
109
|
-
/**
|
|
110
|
-
* Get security events for a specific domain
|
|
111
|
-
* @param domain The domain to filter by
|
|
112
|
-
* @param limit Maximum number of events to return
|
|
113
|
-
* @returns Security events for the domain
|
|
114
|
-
*/
|
|
115
|
-
getEventsByDomain(domain: string, limit?: number): ISecurityEvent[];
|
|
116
|
-
/**
|
|
117
|
-
* Send a notification for critical security events
|
|
118
|
-
* @param event The security event to notify about
|
|
119
|
-
* @private
|
|
120
|
-
*/
|
|
121
|
-
private sendNotification;
|
|
122
|
-
/**
|
|
123
|
-
* Clear event history
|
|
124
|
-
*/
|
|
125
|
-
clearEvents(): void;
|
|
126
|
-
/**
|
|
127
|
-
* Get statistical summary of security events
|
|
128
|
-
* @param timeWindow Optional time window in milliseconds
|
|
129
|
-
* @returns Summary of security events
|
|
130
|
-
*/
|
|
131
|
-
getEventsSummary(timeWindow?: number): {
|
|
132
|
-
total: number;
|
|
133
|
-
byLevel: Record<SecurityLogLevel, number>;
|
|
134
|
-
byType: Record<SecurityEventType, number>;
|
|
135
|
-
topIPs: Array<{
|
|
136
|
-
ip: string;
|
|
137
|
-
count: number;
|
|
138
|
-
}>;
|
|
139
|
-
topDomains: Array<{
|
|
140
|
-
domain: string;
|
|
141
|
-
count: number;
|
|
142
|
-
}>;
|
|
143
|
-
};
|
|
144
|
-
}
|
|
@@ -1,233 +0,0 @@
|
|
|
1
|
-
import * as plugins from '../plugins.js';
|
|
2
|
-
import { logger } from '../logger.js';
|
|
3
|
-
/**
|
|
4
|
-
* Log level for security events
|
|
5
|
-
*/
|
|
6
|
-
export var SecurityLogLevel;
|
|
7
|
-
(function (SecurityLogLevel) {
|
|
8
|
-
SecurityLogLevel["INFO"] = "info";
|
|
9
|
-
SecurityLogLevel["WARN"] = "warn";
|
|
10
|
-
SecurityLogLevel["ERROR"] = "error";
|
|
11
|
-
SecurityLogLevel["CRITICAL"] = "critical";
|
|
12
|
-
})(SecurityLogLevel || (SecurityLogLevel = {}));
|
|
13
|
-
/**
|
|
14
|
-
* Security event types for categorization
|
|
15
|
-
*/
|
|
16
|
-
export var SecurityEventType;
|
|
17
|
-
(function (SecurityEventType) {
|
|
18
|
-
SecurityEventType["AUTHENTICATION"] = "authentication";
|
|
19
|
-
SecurityEventType["ACCESS_CONTROL"] = "access_control";
|
|
20
|
-
SecurityEventType["EMAIL_VALIDATION"] = "email_validation";
|
|
21
|
-
SecurityEventType["EMAIL_PROCESSING"] = "email_processing";
|
|
22
|
-
SecurityEventType["EMAIL_FORWARDING"] = "email_forwarding";
|
|
23
|
-
SecurityEventType["EMAIL_DELIVERY"] = "email_delivery";
|
|
24
|
-
SecurityEventType["DKIM"] = "dkim";
|
|
25
|
-
SecurityEventType["SPF"] = "spf";
|
|
26
|
-
SecurityEventType["DMARC"] = "dmarc";
|
|
27
|
-
SecurityEventType["RATE_LIMIT"] = "rate_limit";
|
|
28
|
-
SecurityEventType["RATE_LIMITING"] = "rate_limiting";
|
|
29
|
-
SecurityEventType["SPAM"] = "spam";
|
|
30
|
-
SecurityEventType["MALWARE"] = "malware";
|
|
31
|
-
SecurityEventType["CONNECTION"] = "connection";
|
|
32
|
-
SecurityEventType["DATA_EXPOSURE"] = "data_exposure";
|
|
33
|
-
SecurityEventType["CONFIGURATION"] = "configuration";
|
|
34
|
-
SecurityEventType["IP_REPUTATION"] = "ip_reputation";
|
|
35
|
-
SecurityEventType["REJECTED_CONNECTION"] = "rejected_connection";
|
|
36
|
-
})(SecurityEventType || (SecurityEventType = {}));
|
|
37
|
-
/**
|
|
38
|
-
* Security logger for enhanced security monitoring
|
|
39
|
-
*/
|
|
40
|
-
export class SecurityLogger {
|
|
41
|
-
static instance;
|
|
42
|
-
securityEvents = [];
|
|
43
|
-
maxEventHistory;
|
|
44
|
-
enableNotifications;
|
|
45
|
-
constructor(options) {
|
|
46
|
-
this.maxEventHistory = options?.maxEventHistory || 1000;
|
|
47
|
-
this.enableNotifications = options?.enableNotifications || false;
|
|
48
|
-
}
|
|
49
|
-
/**
|
|
50
|
-
* Get singleton instance
|
|
51
|
-
*/
|
|
52
|
-
static getInstance(options) {
|
|
53
|
-
if (!SecurityLogger.instance) {
|
|
54
|
-
SecurityLogger.instance = new SecurityLogger(options);
|
|
55
|
-
}
|
|
56
|
-
return SecurityLogger.instance;
|
|
57
|
-
}
|
|
58
|
-
/**
|
|
59
|
-
* Reset the singleton instance (for shutdown/testing)
|
|
60
|
-
*/
|
|
61
|
-
static resetInstance() {
|
|
62
|
-
SecurityLogger.instance = undefined;
|
|
63
|
-
}
|
|
64
|
-
/**
|
|
65
|
-
* Log a security event
|
|
66
|
-
* @param event The security event to log
|
|
67
|
-
*/
|
|
68
|
-
logEvent(event) {
|
|
69
|
-
const fullEvent = {
|
|
70
|
-
...event,
|
|
71
|
-
timestamp: Date.now()
|
|
72
|
-
};
|
|
73
|
-
// Store in memory buffer
|
|
74
|
-
this.securityEvents.push(fullEvent);
|
|
75
|
-
// Trim history if needed
|
|
76
|
-
if (this.securityEvents.length > this.maxEventHistory) {
|
|
77
|
-
this.securityEvents.shift();
|
|
78
|
-
}
|
|
79
|
-
// Log to regular logger with appropriate level
|
|
80
|
-
switch (event.level) {
|
|
81
|
-
case SecurityLogLevel.INFO:
|
|
82
|
-
logger.log('info', `[SECURITY:${event.type}] ${event.message}`, event.details);
|
|
83
|
-
break;
|
|
84
|
-
case SecurityLogLevel.WARN:
|
|
85
|
-
logger.log('warn', `[SECURITY:${event.type}] ${event.message}`, event.details);
|
|
86
|
-
break;
|
|
87
|
-
case SecurityLogLevel.ERROR:
|
|
88
|
-
case SecurityLogLevel.CRITICAL:
|
|
89
|
-
logger.log('error', `[SECURITY:${event.type}] ${event.message}`, event.details);
|
|
90
|
-
// Send notification for critical events if enabled
|
|
91
|
-
if (event.level === SecurityLogLevel.CRITICAL && this.enableNotifications) {
|
|
92
|
-
this.sendNotification(fullEvent);
|
|
93
|
-
}
|
|
94
|
-
break;
|
|
95
|
-
}
|
|
96
|
-
}
|
|
97
|
-
/**
|
|
98
|
-
* Get recent security events
|
|
99
|
-
* @param limit Maximum number of events to return
|
|
100
|
-
* @param filter Filter for specific event types
|
|
101
|
-
* @returns Recent security events
|
|
102
|
-
*/
|
|
103
|
-
getRecentEvents(limit = 100, filter) {
|
|
104
|
-
let filteredEvents = this.securityEvents;
|
|
105
|
-
// Apply filters
|
|
106
|
-
if (filter) {
|
|
107
|
-
if (filter.level) {
|
|
108
|
-
filteredEvents = filteredEvents.filter(event => event.level === filter.level);
|
|
109
|
-
}
|
|
110
|
-
if (filter.type) {
|
|
111
|
-
filteredEvents = filteredEvents.filter(event => event.type === filter.type);
|
|
112
|
-
}
|
|
113
|
-
if (filter.fromTimestamp) {
|
|
114
|
-
filteredEvents = filteredEvents.filter(event => event.timestamp >= filter.fromTimestamp);
|
|
115
|
-
}
|
|
116
|
-
if (filter.toTimestamp) {
|
|
117
|
-
filteredEvents = filteredEvents.filter(event => event.timestamp <= filter.toTimestamp);
|
|
118
|
-
}
|
|
119
|
-
}
|
|
120
|
-
// Return most recent events up to limit (slice first to avoid mutating source)
|
|
121
|
-
return filteredEvents
|
|
122
|
-
.slice()
|
|
123
|
-
.sort((a, b) => b.timestamp - a.timestamp)
|
|
124
|
-
.slice(0, limit);
|
|
125
|
-
}
|
|
126
|
-
/**
|
|
127
|
-
* Get events by security level
|
|
128
|
-
* @param level The security level to filter by
|
|
129
|
-
* @param limit Maximum number of events to return
|
|
130
|
-
* @returns Security events matching the level
|
|
131
|
-
*/
|
|
132
|
-
getEventsByLevel(level, limit = 100) {
|
|
133
|
-
return this.getRecentEvents(limit, { level });
|
|
134
|
-
}
|
|
135
|
-
/**
|
|
136
|
-
* Get events by security type
|
|
137
|
-
* @param type The event type to filter by
|
|
138
|
-
* @param limit Maximum number of events to return
|
|
139
|
-
* @returns Security events matching the type
|
|
140
|
-
*/
|
|
141
|
-
getEventsByType(type, limit = 100) {
|
|
142
|
-
return this.getRecentEvents(limit, { type });
|
|
143
|
-
}
|
|
144
|
-
/**
|
|
145
|
-
* Get security events for a specific IP address
|
|
146
|
-
* @param ipAddress The IP address to filter by
|
|
147
|
-
* @param limit Maximum number of events to return
|
|
148
|
-
* @returns Security events for the IP address
|
|
149
|
-
*/
|
|
150
|
-
getEventsByIP(ipAddress, limit = 100) {
|
|
151
|
-
return this.securityEvents
|
|
152
|
-
.filter(event => event.ipAddress === ipAddress)
|
|
153
|
-
.sort((a, b) => b.timestamp - a.timestamp)
|
|
154
|
-
.slice(0, limit);
|
|
155
|
-
}
|
|
156
|
-
/**
|
|
157
|
-
* Get security events for a specific domain
|
|
158
|
-
* @param domain The domain to filter by
|
|
159
|
-
* @param limit Maximum number of events to return
|
|
160
|
-
* @returns Security events for the domain
|
|
161
|
-
*/
|
|
162
|
-
getEventsByDomain(domain, limit = 100) {
|
|
163
|
-
return this.securityEvents
|
|
164
|
-
.filter(event => event.domain === domain)
|
|
165
|
-
.sort((a, b) => b.timestamp - a.timestamp)
|
|
166
|
-
.slice(0, limit);
|
|
167
|
-
}
|
|
168
|
-
/**
|
|
169
|
-
* Send a notification for critical security events
|
|
170
|
-
* @param event The security event to notify about
|
|
171
|
-
* @private
|
|
172
|
-
*/
|
|
173
|
-
sendNotification(event) {
|
|
174
|
-
// In a production environment, this would integrate with a notification service
|
|
175
|
-
// For now, we'll just log that we would send a notification
|
|
176
|
-
logger.log('error', `[SECURITY NOTIFICATION] ${event.message}`, {
|
|
177
|
-
...event,
|
|
178
|
-
notificationSent: true
|
|
179
|
-
});
|
|
180
|
-
// Future integration with alerting systems would go here
|
|
181
|
-
}
|
|
182
|
-
/**
|
|
183
|
-
* Clear event history
|
|
184
|
-
*/
|
|
185
|
-
clearEvents() {
|
|
186
|
-
this.securityEvents = [];
|
|
187
|
-
}
|
|
188
|
-
/**
|
|
189
|
-
* Get statistical summary of security events
|
|
190
|
-
* @param timeWindow Optional time window in milliseconds
|
|
191
|
-
* @returns Summary of security events
|
|
192
|
-
*/
|
|
193
|
-
getEventsSummary(timeWindow) {
|
|
194
|
-
const cutoff = timeWindow ? Date.now() - timeWindow : 0;
|
|
195
|
-
// Initialize counters
|
|
196
|
-
const byLevel = {};
|
|
197
|
-
for (const level of Object.values(SecurityLogLevel)) {
|
|
198
|
-
byLevel[level] = 0;
|
|
199
|
-
}
|
|
200
|
-
const byType = {};
|
|
201
|
-
for (const type of Object.values(SecurityEventType)) {
|
|
202
|
-
byType[type] = 0;
|
|
203
|
-
}
|
|
204
|
-
const ipCounts = new Map();
|
|
205
|
-
const domainCounts = new Map();
|
|
206
|
-
// Single pass over all events
|
|
207
|
-
let total = 0;
|
|
208
|
-
for (const e of this.securityEvents) {
|
|
209
|
-
if (cutoff && e.timestamp < cutoff)
|
|
210
|
-
continue;
|
|
211
|
-
total++;
|
|
212
|
-
byLevel[e.level]++;
|
|
213
|
-
byType[e.type]++;
|
|
214
|
-
if (e.ipAddress) {
|
|
215
|
-
ipCounts.set(e.ipAddress, (ipCounts.get(e.ipAddress) || 0) + 1);
|
|
216
|
-
}
|
|
217
|
-
if (e.domain) {
|
|
218
|
-
domainCounts.set(e.domain, (domainCounts.get(e.domain) || 0) + 1);
|
|
219
|
-
}
|
|
220
|
-
}
|
|
221
|
-
// Sort and limit top entries
|
|
222
|
-
const topIPs = Array.from(ipCounts.entries())
|
|
223
|
-
.map(([ip, count]) => ({ ip, count }))
|
|
224
|
-
.sort((a, b) => b.count - a.count)
|
|
225
|
-
.slice(0, 10);
|
|
226
|
-
const topDomains = Array.from(domainCounts.entries())
|
|
227
|
-
.map(([domain, count]) => ({ domain, count }))
|
|
228
|
-
.sort((a, b) => b.count - a.count)
|
|
229
|
-
.slice(0, 10);
|
|
230
|
-
return { total, byLevel, byType, topIPs, topDomains };
|
|
231
|
-
}
|
|
232
|
-
}
|
|
233
|
-
//# sourceMappingURL=data:application/json;base64,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
|