Skip to content

Convert downstream requests header keys to lower case #10319

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
manuel-alvarez-alvarez merged 1 commit into from
Jan 9, 2026
Merged

Convert downstream requests header keys to lower case #10319

manuel-alvarez-alvarez merged 1 commit into from
Jan 9, 2026

Conversation

@manuel-alvarez-alvarez
Copy link
Member

@manuel-alvarez-alvarez manuel-alvarez-alvarez commented Jan 9, 2026 •
edited
Loading

What Does This Do

Convert header keys to lower case before being set to the WAF

Motivation

Additional Notes

Contributor Checklist

Jira ticket: APPSEC-60515

@manuel-alvarez-alvarez manuel-alvarez-alvarez requested a review from a team as a code owner January 9, 2026 10:10
@manuel-alvarez-alvarez manuel-alvarez-alvarez added type: enhancement Enhancements and improvements tag: no release notes Changes to exclude from release notes labels Jan 9, 2026
@manuel-alvarez-alvarez manuel-alvarez-alvarez added the comp: asm waf Application Security Management (WAF) label Jan 9, 2026
jandro996
jandro996 approved these changes Jan 9, 2026
View reviewed changes
Copy link
Member

@jandro996 jandro996 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@pr-commenter
Copy link

pr-commenter bot commented Jan 9, 2026

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/api-10-lowercase-headers
git_commit_date 1767950001 1767953083
git_commit_sha 8ef6e7a 85670c0
release_version 1.59.0-SNAPSHOT~8ef6e7ab7b 1.59.0-SNAPSHOT~85670c04df
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1767955206 1767955206
ci_job_id 1338595875 1338595875
ci_pipeline_id 89867799 89867799
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-1dqmagc2 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-1dqmagc2 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 59 metrics, 6 unstable metrics.

Startup time reports for insecure-bank 
gantt
    title insecure-bank - global startup overhead: candidate=1.59.0-SNAPSHOT~85670c04df, baseline=1.59.0-SNAPSHOT~8ef6e7ab7b

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.089 s) : 0, 1088987
Total [baseline] (8.778 s) : 0, 8778306
Agent [candidate] (1.085 s) : 0, 1084737
Total [candidate] (8.742 s) : 0, 8742422
section iast
Agent [baseline] (1.229 s) : 0, 1229198
Total [baseline] (9.332 s) : 0, 9332424
Agent [candidate] (1.22 s) : 0, 1220226
Total [candidate] (9.267 s) : 0, 9267232
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.089 s -
Agent iast 1.229 s 140.211 ms (12.9%)
Total tracing 8.778 s -
Total iast 9.332 s 554.117 ms (6.3%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.085 s -
Agent iast 1.22 s 135.489 ms (12.5%)
Total tracing 8.742 s -
Total iast 9.267 s 524.81 ms (6.0%) 
gantt
    title insecure-bank - break down per module: candidate=1.59.0-SNAPSHOT~85670c04df, baseline=1.59.0-SNAPSHOT~8ef6e7ab7b

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.205 ms) : 0, 1205
crashtracking [candidate] (1.186 ms) : 0, 1186
BytebuddyAgent [baseline] (654.561 ms) : 0, 654561
BytebuddyAgent [candidate] (651.861 ms) : 0, 651861
GlobalTracer [baseline] (283.944 ms) : 0, 283944
GlobalTracer [candidate] (282.859 ms) : 0, 282859
AppSec [baseline] (32.973 ms) : 0, 32973
AppSec [candidate] (32.581 ms) : 0, 32581
Debugger [baseline] (67.404 ms) : 0, 67404
Debugger [candidate] (67.285 ms) : 0, 67285
Remote Config [baseline] (624.328 µs) : 0, 624
Remote Config [candidate] (618.713 µs) : 0, 619
Telemetry [baseline] (8.964 ms) : 0, 8964
Telemetry [candidate] (9.079 ms) : 0, 9079
Flare Poller [baseline] (3.748 ms) : 0, 3748
Flare Poller [candidate] (3.792 ms) : 0, 3792
section iast
crashtracking [baseline] (1.179 ms) : 0, 1179
crashtracking [candidate] (1.175 ms) : 0, 1175
BytebuddyAgent [baseline] (795.583 ms) : 0, 795583
BytebuddyAgent [candidate] (789.956 ms) : 0, 789956
GlobalTracer [baseline] (257.233 ms) : 0, 257233
GlobalTracer [candidate] (255.076 ms) : 0, 255076
IAST [baseline] (27.172 ms) : 0, 27172
IAST [candidate] (27.006 ms) : 0, 27006
AppSec [baseline] (34.309 ms) : 0, 34309
AppSec [candidate] (34.38 ms) : 0, 34380
Debugger [baseline] (65.482 ms) : 0, 65482
Debugger [candidate] (64.747 ms) : 0, 64747
Remote Config [baseline] (590.202 µs) : 0, 590
Remote Config [candidate] (594.33 µs) : 0, 594
Telemetry [baseline] (8.548 ms) : 0, 8548
Telemetry [candidate] (8.414 ms) : 0, 8414
Flare Poller [baseline] (3.58 ms) : 0, 3580
Flare Poller [candidate] (3.534 ms) : 0, 3534
Loading
Startup time reports for petclinic 
gantt
    title petclinic - global startup overhead: candidate=1.59.0-SNAPSHOT~85670c04df, baseline=1.59.0-SNAPSHOT~8ef6e7ab7b

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.09 s) : 0, 1089902
Total [baseline] (10.743 s) : 0, 10742955
Agent [candidate] (1.087 s) : 0, 1086891
Total [candidate] (10.718 s) : 0, 10718089
section appsec
Agent [baseline] (1.272 s) : 0, 1272473
Total [baseline] (11.013 s) : 0, 11013461
Agent [candidate] (1.268 s) : 0, 1267937
Total [candidate] (10.944 s) : 0, 10944464
section iast
Agent [baseline] (1.223 s) : 0, 1223285
Total [baseline] (11.178 s) : 0, 11178173
Agent [candidate] (1.224 s) : 0, 1223817
Total [candidate] (11.182 s) : 0, 11181992
section profiling
Agent [baseline] (1.228 s) : 0, 1228073
Total [baseline] (11.049 s) : 0, 11048571
Agent [candidate] (1.21 s) : 0, 1210125
Total [candidate] (10.94 s) : 0, 10940195
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.09 s -
Agent appsec 1.272 s 182.571 ms (16.8%)
Agent iast 1.223 s 133.384 ms (12.2%)
Agent profiling 1.228 s 138.171 ms (12.7%)
Total tracing 10.743 s -
Total appsec 11.013 s 270.505 ms (2.5%)
Total iast 11.178 s 435.218 ms (4.1%)
Total profiling 11.049 s 305.616 ms (2.8%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.087 s -
Agent appsec 1.268 s 181.046 ms (16.7%)
Agent iast 1.224 s 136.926 ms (12.6%)
Agent profiling 1.21 s 123.233 ms (11.3%)
Total tracing 10.718 s -
Total appsec 10.944 s 226.375 ms (2.1%)
Total iast 11.182 s 463.903 ms (4.3%)
Total profiling 10.94 s 222.106 ms (2.1%) 
gantt
    title petclinic - break down per module: candidate=1.59.0-SNAPSHOT~85670c04df, baseline=1.59.0-SNAPSHOT~8ef6e7ab7b

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.184 ms) : 0, 1184
crashtracking [candidate] (1.183 ms) : 0, 1183
BytebuddyAgent [baseline] (654.378 ms) : 0, 654378
BytebuddyAgent [candidate] (652.75 ms) : 0, 652750
GlobalTracer [baseline] (283.755 ms) : 0, 283755
GlobalTracer [candidate] (282.841 ms) : 0, 282841
AppSec [baseline] (32.921 ms) : 0, 32921
AppSec [candidate] (32.827 ms) : 0, 32827
Debugger [baseline] (68.483 ms) : 0, 68483
Debugger [candidate] (68.403 ms) : 0, 68403
Remote Config [baseline] (632.886 µs) : 0, 633
Remote Config [candidate] (632.592 µs) : 0, 633
Telemetry [baseline] (9.081 ms) : 0, 9081
Telemetry [candidate] (8.987 ms) : 0, 8987
Flare Poller [baseline] (3.809 ms) : 0, 3809
Flare Poller [candidate] (3.741 ms) : 0, 3741
section appsec
crashtracking [baseline] (1.187 ms) : 0, 1187
crashtracking [candidate] (1.181 ms) : 0, 1181
BytebuddyAgent [baseline] (694.952 ms) : 0, 694952
BytebuddyAgent [candidate] (691.814 ms) : 0, 691814
GlobalTracer [baseline] (259.443 ms) : 0, 259443
GlobalTracer [candidate] (259.398 ms) : 0, 259398
AppSec [baseline] (174.272 ms) : 0, 174272
AppSec [candidate] (173.634 ms) : 0, 173634
Debugger [baseline] (68.54 ms) : 0, 68540
Debugger [candidate] (67.908 ms) : 0, 67908
Remote Config [baseline] (757.457 µs) : 0, 757
Remote Config [candidate] (727.613 µs) : 0, 728
Telemetry [baseline] (9.38 ms) : 0, 9380
Telemetry [candidate] (9.474 ms) : 0, 9474
Flare Poller [baseline] (3.693 ms) : 0, 3693
Flare Poller [candidate] (3.737 ms) : 0, 3737
IAST [baseline] (24.776 ms) : 0, 24776
IAST [candidate] (24.66 ms) : 0, 24660
section iast
crashtracking [baseline] (1.181 ms) : 0, 1181
crashtracking [candidate] (1.178 ms) : 0, 1178
BytebuddyAgent [baseline] (790.701 ms) : 0, 790701
BytebuddyAgent [candidate] (791.369 ms) : 0, 791369
GlobalTracer [baseline] (255.731 ms) : 0, 255731
GlobalTracer [candidate] (256.143 ms) : 0, 256143
AppSec [baseline] (34.29 ms) : 0, 34290
AppSec [candidate] (35.138 ms) : 0, 35138
Debugger [baseline] (66.294 ms) : 0, 66294
Debugger [candidate] (65.057 ms) : 0, 65057
Remote Config [baseline] (593.21 µs) : 0, 593
Remote Config [candidate] (599.92 µs) : 0, 600
Telemetry [baseline] (8.628 ms) : 0, 8628
Telemetry [candidate] (8.508 ms) : 0, 8508
Flare Poller [baseline] (3.568 ms) : 0, 3568
Flare Poller [candidate] (3.538 ms) : 0, 3538
IAST [baseline] (26.994 ms) : 0, 26994
IAST [candidate] (26.979 ms) : 0, 26979
section profiling
ProfilingAgent [baseline] (97.596 ms) : 0, 97596
ProfilingAgent [candidate] (96.834 ms) : 0, 96834
crashtracking [baseline] (1.238 ms) : 0, 1238
crashtracking [candidate] (1.219 ms) : 0, 1219
BytebuddyAgent [baseline] (718.131 ms) : 0, 718131
BytebuddyAgent [candidate] (706.402 ms) : 0, 706402
GlobalTracer [baseline] (224.744 ms) : 0, 224744
GlobalTracer [candidate] (221.811 ms) : 0, 221811
AppSec [baseline] (33.265 ms) : 0, 33265
AppSec [candidate] (32.402 ms) : 0, 32402
Debugger [baseline] (68.803 ms) : 0, 68803
Debugger [candidate] (68.452 ms) : 0, 68452
Remote Config [baseline] (648.361 µs) : 0, 648
Remote Config [candidate] (619.358 µs) : 0, 619
Telemetry [baseline] (8.881 ms) : 0, 8881
Telemetry [candidate] (8.642 ms) : 0, 8642
Flare Poller [baseline] (3.671 ms) : 0, 3671
Flare Poller [candidate] (3.601 ms) : 0, 3601
Profiling [baseline] (98.194 ms) : 0, 98194
Profiling [candidate] (97.409 ms) : 0, 97409
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/api-10-lowercase-headers
git_commit_date 1767950001 1767953083
git_commit_sha 8ef6e7a 85670c0
release_version 1.59.0-SNAPSHOT~8ef6e7ab7b 1.59.0-SNAPSHOT~85670c04df
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1767955679 1767955679
ci_job_id 1338595876 1338595876
ci_pipeline_id 89867799 89867799
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-jeziarxr 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-jeziarxr 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 19 metrics, 17 unstable metrics.

Request duration reports for petclinic 
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.59.0-SNAPSHOT~85670c04df, baseline=1.59.0-SNAPSHOT~8ef6e7ab7b
    dateFormat X
    axisFormat %s
section baseline
no_agent (18.024 ms) : 17839, 18209
.   : milestone, 18024,
appsec (18.555 ms) : 18365, 18746
.   : milestone, 18555,
code_origins (17.828 ms) : 17652, 18004
.   : milestone, 17828,
iast (17.745 ms) : 17568, 17922
.   : milestone, 17745,
profiling (18.424 ms) : 18240, 18607
.   : milestone, 18424,
tracing (17.806 ms) : 17629, 17984
.   : milestone, 17806,
section candidate
no_agent (19.358 ms) : 19161, 19556
.   : milestone, 19358,
appsec (18.543 ms) : 18350, 18736
.   : milestone, 18543,
code_origins (17.564 ms) : 17389, 17739
.   : milestone, 17564,
iast (17.688 ms) : 17513, 17863
.   : milestone, 17688,
profiling (18.505 ms) : 18318, 18692
.   : milestone, 18505,
tracing (17.859 ms) : 17680, 18039
.   : milestone, 17859,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 18.024 ms [17.839 ms, 18.209 ms] -
appsec 18.555 ms [18.365 ms, 18.746 ms] 531.285 µs (2.9%)
code_origins 17.828 ms [17.652 ms, 18.004 ms] -196.028 µs (-1.1%)
iast 17.745 ms [17.568 ms, 17.922 ms] -279.039 µs (-1.5%)
profiling 18.424 ms [18.24 ms, 18.607 ms] 399.603 µs (2.2%)
tracing 17.806 ms [17.629 ms, 17.984 ms] -217.776 µs (-1.2%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 19.358 ms [19.161 ms, 19.556 ms] -
appsec 18.543 ms [18.35 ms, 18.736 ms] -815.44 µs (-4.2%)
code_origins 17.564 ms [17.389 ms, 17.739 ms] -1.794 ms (-9.3%)
iast 17.688 ms [17.513 ms, 17.863 ms] -1.67 ms (-8.6%)
profiling 18.505 ms [18.318 ms, 18.692 ms] -852.796 µs (-4.4%)
tracing 17.859 ms [17.68 ms, 18.039 ms] -1.499 ms (-7.7%)
Request duration reports for insecure-bank 
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.59.0-SNAPSHOT~85670c04df, baseline=1.59.0-SNAPSHOT~8ef6e7ab7b
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.193 ms) : 1181, 1205
.   : milestone, 1193,
iast (3.189 ms) : 3143, 3235
.   : milestone, 3189,
iast_FULL (5.596 ms) : 5541, 5651
.   : milestone, 5596,
iast_GLOBAL (3.538 ms) : 3479, 3597
.   : milestone, 3538,
profiling (2.002 ms) : 1983, 2021
.   : milestone, 2002,
tracing (1.755 ms) : 1741, 1769
.   : milestone, 1755,
section candidate
no_agent (1.179 ms) : 1168, 1190
.   : milestone, 1179,
iast (3.158 ms) : 3123, 3192
.   : milestone, 3158,
iast_FULL (5.735 ms) : 5678, 5791
.   : milestone, 5735,
iast_GLOBAL (3.474 ms) : 3424, 3524
.   : milestone, 3474,
profiling (2.054 ms) : 2035, 2073
.   : milestone, 2054,
tracing (1.776 ms) : 1761, 1791
.   : milestone, 1776,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.193 ms [1.181 ms, 1.205 ms] -
iast 3.189 ms [3.143 ms, 3.235 ms] 1.997 ms (167.4%)
iast_FULL 5.596 ms [5.541 ms, 5.651 ms] 4.403 ms (369.1%)
iast_GLOBAL 3.538 ms [3.479 ms, 3.597 ms] 2.345 ms (196.6%)
profiling 2.002 ms [1.983 ms, 2.021 ms] 809.372 µs (67.9%)
tracing 1.755 ms [1.741 ms, 1.769 ms] 562.456 µs (47.2%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.179 ms [1.168 ms, 1.19 ms] -
iast 3.158 ms [3.123 ms, 3.192 ms] 1.979 ms (167.9%)
iast_FULL 5.735 ms [5.678 ms, 5.791 ms] 4.556 ms (386.5%)
iast_GLOBAL 3.474 ms [3.424 ms, 3.524 ms] 2.295 ms (194.7%)
profiling 2.054 ms [2.035 ms, 2.073 ms] 875.158 µs (74.2%)
tracing 1.776 ms [1.761 ms, 1.791 ms] 597.635 µs (50.7%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/api-10-lowercase-headers
git_commit_date 1767950001 1767953083
git_commit_sha 8ef6e7a 85670c0
release_version 1.59.0-SNAPSHOT~8ef6e7ab7b 1.59.0-SNAPSHOT~85670c04df
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1767955392 1767955392
ci_job_id 1338595877 1338595877
ci_pipeline_id 89867799 89867799
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-1-yzivrab7 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-1-yzivrab7 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for biojava 
gantt
    title biojava - execution time [CI 0.99] : candidate=1.59.0-SNAPSHOT~85670c04df, baseline=1.59.0-SNAPSHOT~8ef6e7ab7b
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.08 s) : 15080000, 15080000
.   : milestone, 15080000,
appsec (14.708 s) : 14708000, 14708000
.   : milestone, 14708000,
iast (18.204 s) : 18204000, 18204000
.   : milestone, 18204000,
iast_GLOBAL (17.923 s) : 17923000, 17923000
.   : milestone, 17923000,
profiling (14.774 s) : 14774000, 14774000
.   : milestone, 14774000,
tracing (14.457 s) : 14457000, 14457000
.   : milestone, 14457000,
section candidate
no_agent (14.917 s) : 14917000, 14917000
.   : milestone, 14917000,
appsec (14.595 s) : 14595000, 14595000
.   : milestone, 14595000,
iast (18.392 s) : 18392000, 18392000
.   : milestone, 18392000,
iast_GLOBAL (17.972 s) : 17972000, 17972000
.   : milestone, 17972000,
profiling (14.586 s) : 14586000, 14586000
.   : milestone, 14586000,
tracing (14.787 s) : 14787000, 14787000
.   : milestone, 14787000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.08 s [15.08 s, 15.08 s] -
appsec 14.708 s [14.708 s, 14.708 s] -372.0 ms (-2.5%)
iast 18.204 s [18.204 s, 18.204 s] 3.124 s (20.7%)
iast_GLOBAL 17.923 s [17.923 s, 17.923 s] 2.843 s (18.9%)
profiling 14.774 s [14.774 s, 14.774 s] -306.0 ms (-2.0%)
tracing 14.457 s [14.457 s, 14.457 s] -623.0 ms (-4.1%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 14.917 s [14.917 s, 14.917 s] -
appsec 14.595 s [14.595 s, 14.595 s] -322.0 ms (-2.2%)
iast 18.392 s [18.392 s, 18.392 s] 3.475 s (23.3%)
iast_GLOBAL 17.972 s [17.972 s, 17.972 s] 3.055 s (20.5%)
profiling 14.586 s [14.586 s, 14.586 s] -331.0 ms (-2.2%)
tracing 14.787 s [14.787 s, 14.787 s] -130.0 ms (-0.9%)
Execution time for tomcat 
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.59.0-SNAPSHOT~85670c04df, baseline=1.59.0-SNAPSHOT~8ef6e7ab7b
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.477 ms) : 1465, 1488
.   : milestone, 1477,
appsec (3.689 ms) : 3472, 3906
.   : milestone, 3689,
iast (2.215 ms) : 2150, 2280
.   : milestone, 2215,
iast_GLOBAL (2.269 ms) : 2204, 2334
.   : milestone, 2269,
profiling (2.142 ms) : 2086, 2198
.   : milestone, 2142,
tracing (2.043 ms) : 1992, 2094
.   : milestone, 2043,
section candidate
no_agent (1.481 ms) : 1469, 1492
.   : milestone, 1481,
appsec (3.665 ms) : 3451, 3879
.   : milestone, 3665,
iast (2.227 ms) : 2162, 2291
.   : milestone, 2227,
iast_GLOBAL (2.274 ms) : 2208, 2340
.   : milestone, 2274,
profiling (2.056 ms) : 2004, 2108
.   : milestone, 2056,
tracing (2.053 ms) : 2002, 2104
.   : milestone, 2053,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.477 ms [1.465 ms, 1.488 ms] -
appsec 3.689 ms [3.472 ms, 3.906 ms] 2.212 ms (149.8%)
iast 2.215 ms [2.15 ms, 2.28 ms] 738.328 µs (50.0%)
iast_GLOBAL 2.269 ms [2.204 ms, 2.334 ms] 792.491 µs (53.7%)
profiling 2.142 ms [2.086 ms, 2.198 ms] 665.575 µs (45.1%)
tracing 2.043 ms [1.992 ms, 2.094 ms] 566.578 µs (38.4%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.481 ms [1.469 ms, 1.492 ms] -
appsec 3.665 ms [3.451 ms, 3.879 ms] 2.184 ms (147.5%)
iast 2.227 ms [2.162 ms, 2.291 ms] 746.069 µs (50.4%)
iast_GLOBAL 2.274 ms [2.208 ms, 2.34 ms] 793.233 µs (53.6%)
profiling 2.056 ms [2.004 ms, 2.108 ms] 575.046 µs (38.8%)
tracing 2.053 ms [2.002 ms, 2.104 ms] 572.562 µs (38.7%)

@manuel-alvarez-alvarez manuel-alvarez-alvarez merged commit 02a76b1 into master Jan 9, 2026
571 of 573 checks passed
@manuel-alvarez-alvarez manuel-alvarez-alvarez deleted the malvarez/api-10-lowercase-headers branch January 9, 2026 11:34
@github-actions github-actions bot added this to the 1.59.0 milestone Jan 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jandro996 jandro996 jandro996 approved these changes

@claponcet claponcet Awaiting requested review from claponcet claponcet is a code owner automatically assigned from DataDog/asm-java

Assignees

No one assigned

Labels

comp: asm waf Application Security Management (WAF) tag: no release notes Changes to exclude from release notes type: enhancement Enhancements and improvements

Projects

None yet

Milestone

1.59.0

Development

Successfully merging this pull request may close these issues.

3 participants

@manuel-alvarez-alvarez @jandro996