Skip to content

docs(adr): decide Coraza SPOA integration approach - #162

Merged
bihius merged 1 commit into
mainfrom
docs/adr-007-coraza-spoa
Apr 25, 2026
Merged

bihius merged 1 commit into
mainfrom
docs/adr-007-coraza-spoa

Conversation

@bihius

@bihius bihius commented Apr 25, 2026 •

Copy link
Copy Markdown
Owner

Summary

  • Add ADR-007 documenting the decision to use upstream coraza-spoa as a sidecar for M1/MVP.
  • Compare upstream sidecar, custom Go SPOA, and backend/Python-sidecar alternatives with schedule and implementation tradeoffs.
  • Reference ADR-007 from README.architecture.md.

Test plan

  • git diff --check
  • Documentation-only change; no runtime tests required.

Closes #104

Record the M1/MVP decision to use the upstream coraza-spoa sidecar and document the follow-up WAF integration issues it unlocks.

Made-with: Cursor
Copilot AI review requested due to automatic review settings April 25, 2026 09:08

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds an Architecture Decision Record documenting how Guard Proxy will integrate Coraza with HAProxy for the M1/MVP milestone, and links that decision from the architecture documentation.

Changes:

  • Add ADR-007 capturing the decision to use upstream coraza-spoa as a sidecar service (and why).
  • Document alternatives (custom Go SPOA, FastAPI/Python-sidecar) with tradeoffs and consequences.
  • Reference ADR-007 from README.architecture.md.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
notes/decisions/ADR-007-coraza-spoa-integration.md New ADR describing the selected Coraza SPOA integration approach, rationale, alternatives, and implications.
README.architecture.md Adds ADR-007 to the “Key Decisions” ADR index for discoverability.

@bihius
bihius merged commit be63aa1 into main Apr 25, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

M1-01 — ADR-007: Coraza SPOA integration approach

2 participants