2020-06-22 21:25:52 +00:00
|
|
|
id: linkerd-badrule-detect
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: Linkerd detection via bad rule
|
|
|
|
|
author: dudez
|
2020-08-03 21:52:00 +00:00
|
|
|
severity: info
|
2022-04-22 10:38:41 +00:00
|
|
|
reference:
|
|
|
|
|
- https://linkerd.io
|
2023-04-28 08:11:21 +00:00
|
|
|
metadata:
|
|
|
|
|
max-request: 1
|
2023-10-14 11:27:55 +00:00
|
|
|
tags: tech,linkerd
|
2020-06-22 21:25:52 +00:00
|
|
|
|
2023-04-27 04:28:59 +00:00
|
|
|
http:
|
2020-06-22 21:25:52 +00:00
|
|
|
- method: GET
|
|
|
|
|
path:
|
2021-01-13 07:31:46 +00:00
|
|
|
- "{{BaseURL}}"
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2020-06-22 21:25:52 +00:00
|
|
|
headers:
|
|
|
|
|
l5d-dtab: /svc/*
|
|
|
|
|
|
|
|
|
|
matchers-condition: or
|
|
|
|
|
matchers:
|
|
|
|
|
- type: regex
|
|
|
|
|
name: via-linkerd-present
|
|
|
|
|
regex:
|
|
|
|
|
- '(?mi)^Via\s*?:.*?linkerd.*$'
|
|
|
|
|
part: header
|
|
|
|
|
|
|
|
|
|
- type: regex
|
|
|
|
|
name: l5d-err-present
|
|
|
|
|
regex:
|
2020-06-22 21:41:24 +00:00
|
|
|
- '(?mi)^l5d-err:.*$'
|
2020-06-22 21:25:52 +00:00
|
|
|
part: header
|
|
|
|
|
|
|
|
|
|
- type: regex
|
|
|
|
|
name: l5d-success-class-present
|
|
|
|
|
regex:
|
2020-06-22 21:41:24 +00:00
|
|
|
- '(?mi)^l5d-success-class: 0.*$'
|
2020-06-22 21:25:52 +00:00
|
|
|
part: header
|
|
|
|
|
|
|
|
|
|
- type: word
|
|
|
|
|
name: body-error-present
|
|
|
|
|
words:
|
|
|
|
|
- 'expected but end of input found at'
|
|
|
|
|
part: body
|
2023-10-20 11:41:13 +00:00
|
|
|
|
|
|
|
|
# digest: 4a0a004730450220711a7316d8285590ed7b528beaf9885333c7690a3425e13ddbd7c18976c9871b022100f8c8ae75135a62963d28a570d44a3e3d59e12ec260098fac55084c11f55d55c0:922c64590222798bb761d5b6d8e72950
|
