zeek/scripts/policy
Arne Welzel 8edec9885a cluster/websocket: Automatic WebSocket client topic subscription
Subscribe every WebSocket client to a unique topic, by default under

    zeek/cluster/websocket/client/<identifier>/

Add tests that verify that WebSocket clients receive messages on these topics
even if they didn't explicitly pass them in their handshake message.

This is somewhere between feature and bug fix. It aids the ZeroMQ backend
implementation: A WebSocket client that doesn't provide any subscriptions
and immediately starts publishing would discard events until receiving
other nodes subscriptions from the central XPUB/XSUB proxy. ZeroMQ does sender
side topic filtering. When using subscriptions, the client waits until
its own subscriptions are returned from the central XPUB/XSUB proxy,
thereby also learning about other node's subscriptions.

Also, make the no-subscriptions.zeek test use 32 clients sequentially to
trigger potential issues more quickly.
2025-04-24 14:14:22 +02:00
..
files/x509 Remove unified2 file analyzer 2022-08-19 14:05:00 +02:00
frameworks cluster/websocket: Automatic WebSocket client topic subscription 2025-04-24 14:14:22 +02:00
integration/collective-intel Remove barnyard2 integration scripts 2022-08-19 14:04:27 +02:00
misc Merge remote-tracking branch 'J-Gras/topic/jgras/add-unknown-proto-count' 2024-12-10 16:16:12 -07:00
protocols DPD: failed services logging alignment 2025-02-06 18:56:30 +00:00
tuning Remove deprecated policy/tuning/default package 2024-08-07 11:58:21 -07:00