alerting

Documentation

Overview

Package alerting provides notification capabilities for security events.

Index

• type BlockedConnectionInfo
• type Notifier
  • func NewNotifier() *Notifier
  • func (n *Notifier) Close()
  • func (n *Notifier) NotifyBlock(ctx context.Context, info BlockedConnectionInfo)

Types

type BlockedConnectionInfo

type BlockedConnectionInfo struct {
	SourceIP        string
	SourcePort      string
	DestinationIP   string
	DestinationPort string
	Destination     string // Human-readable destination (hostname, SNI, etc.)
	Reason          string
	Component       string // dns, http, sni, etc.
}

BlockedConnectionInfo contains details about a blocked connection.

type Notifier

type Notifier struct {
	// contains filtered or unexported fields
}

Notifier handles sending notifications for security events.

func NewNotifier

func NewNotifier() *Notifier

NewNotifier creates a new notification client. Returns nil if not configured.

func (*Notifier) Close

func (n *Notifier) Close()

Close releases notifier resources and stops sending new alerts.

func (*Notifier) NotifyBlock

func (n *Notifier) NotifyBlock(ctx context.Context, info BlockedConnectionInfo)

NotifyBlock sends an alert notification for a blocked connection, with rate limiting to prevent spam.