server

type DB ¶

type DB struct {
	// contains filtered or unexported fields
}

DB is a very simple indexed database implementation using LevelDB. Records can't be deleted. Any string value in the incoming message is indexed, which makes it possible to run simple key=value queries.

The database is organized as follows:

We only support exact key=value matches, so the index is modeled directly on top of leveldb primitives (scanning key ranges), which makes insertions really fast.

For every message, we generate a unique id, and we store it under messages/<id>. Then we extract all the indexable key/value pairs, and store the message id under index/<key>/<value>/<id> (yes, the id appears twice, it's part of the key just to ensure uniqueness).

Keys and values can be anything as long as they don't contain a null byte (which is used internally as the primary key separator).

func NewDB(path string, dbopts *DBOptions) *DB

func (db *DB) Close()

func (db *DB) Dump(w io.Writer) error

func (db *DB) Query(q map[string]string) ([]audit.Message, error)

func (db *DB) Restore(r io.Reader) error

func (db *DB) Write(msg audit.Message) error

type DBOptions ¶

type DBOptions struct {
	LRUCacheSize       int
	BloomFilterSizeExp int
	ExcludedKeys       []string
}

Options for database creation.

type HttpServer ¶

type HttpServer struct {
	// contains filtered or unexported fields
}

func NewHttpServer(db *DB) *HttpServer

func (h *HttpServer) ListenAndServeTLS(addr, caFile, certFile, keyFile string) error