Cloudflare Web Application Firewall downloader
A library, CLI, and docker image that downloads Cloudflare WAF logs for a specified zone and time range.
Schema
See src/waf_logs/resources/db/ for a list of schemas that are auto-applied at start. This can be disabled by passing --ensure_schema False.
Quickstart
The project is published at https://pypi.org/project/waf-downloader/.
Install it via:
pip install waf-downloader
# or alternatively, directly from git
pip install "git+https://github.com/MihaiBojin/waf-downloader@main"
Or with Docker:
docker pull docker.io/mihaibojin/waf-downloader:latest
The list of published images can be found at: https://github.com/MihaiBojin/waf-downloader/pkgs/container/waf-downloader
and
https://hub.docker.com/repository/docker/mihaibojin/waf-downloader/tags
Build and run with Docker
Define secrets in an .env file (do not quote values):
CLOUDFLARE_TOKEN=...
DB_CONN_STR=...
The Cloudflare token is required (see required permissions), but the connection string is optional. If skipped, it will result in logs being printed to stdout.
IMPORTANT: This project uses taskfile.dev, which you will need to install for running the following commands:
# Build
task docker-build
# Load all logs in zone, starting 5 minutes prior
task docker-run -- --zone_id $CLOUDFLARE_ZONE_ID --start_minutes_ago 5
# And alternatively, only output the logs
task docker-run -- --zone_id $CLOUDFLARE_ZONE_ID --start_minutes_ago 5 2>/dev/null
# Do not specify a start time, relying on a starting timestamp stored in the database
# If a timestamp is not found in the database, or specified with --start_minutes_ago, the downloader will start 5 minutes prior
# This functionality makes it easy to run waf-downloader as a cron job
# NOTE: specifying --start_minutes_ago will always override the timestamp stored in the database, causing potential gaps in the data
task docker-run -- --zone_id $CLOUDFLARE_ZONE_ID
Publishing to PyPI
GitHub-based version publishing
The simplest way to publish a new version (if you have committer rights) is to tag a commit and push it to the repo:
# At a certain commit, ideally after merging a PR to main
git tag v0.1.x
git push origin v0.1.x
A GitHub Action will run, build the library and publish it to the PyPI repositories.
Manual publish
These steps can also be performed locally. For these commands to work, you will need to export two environment variables (or define them in .env):
export TESTPYPI_PASSWORD=... # token for https://test.pypi.org/legacy/
export PYPI_PASSWORD=... # token for https://upload.pypi.org/legacy/
First, publish to the test repo and inspect the package:
task publish-test
If correct, distribute the wheel to the PyPI index:
task publish
Verify the distributed code
task publish-verify
Cloudflare WAF documentation
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file waf_downloader-0.1.18.tar.gz.
File metadata
- Download URL: waf_downloader-0.1.18.tar.gz
- Upload date:
- Size: 22.9 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/5.1.1 CPython/3.13.0
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
a39b81b3b552edf038c26459a97f44f69fa3d9753467b789b20a7e2a237c4913
|
|
| MD5 |
c5108cf53066d2741e64622fdc8f419f
|
|
| BLAKE2b-256 |
38b79b35614eeb59cce1cb459da96dfd0c52484652e6ddf9bdb69603fcaa2664
|
File details
Details for the file waf_downloader-0.1.18-py3-none-any.whl.
File metadata
- Download URL: waf_downloader-0.1.18-py3-none-any.whl
- Upload date:
- Size: 20.7 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/5.1.1 CPython/3.13.0
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
f8603f2807d91ea4f315d108738d2d50a66913723c65d41e4375ed5f6517d3c3
|
|
| MD5 |
8a8b97ef1e1d3d5d38015bde8a0991bb
|
|
| BLAKE2b-256 |
c51b8cac70b0d43d614c109f49941da4b3be4b4f5d845a9cb7ce995dde923559
|
