Remove support for X-Forwarded in client IP resolution by smola · Pull Request #7946 · DataDog/dd-trace-java

smola · 2024-11-13T14:20:37Z

What Does This Do

Remove X-Forwarded header from default client IP resolution.

Motivation

Unclear evidence of real world usage of this header, as well as its format. Support is dropped from default client IP resolution, but it can still be used with dd.trace.client-ip-header=x-forwarded (system property) or DD_TRACE_CLIENT_IP_HEADER=x-forwarded (environment variable).

The header is still collected on security events.

Support for parsing RFC 7239 (Forwarded format) is still maintained.

Additional Notes

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any usefull labels
Squash your commits prior merging or merge using GitHub's Squash and merge
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
~~[ ] Update the public documentation in case of new configuration flag or behavior~~

Jira ticket: APPSEC-55834

pr-commenter · 2024-11-25T09:30:20Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	smola/x-forwarded
git_commit_date	1732489991	1732524487
git_commit_sha	`4925a50`	`ad3a959`
release_version	1.43.0-SNAPSHOT~4925a50233	1.43.0-SNAPSHOT~ad3a95960c

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1732526839	1732526839
ci_job_id	718405034	718405034
ci_pipeline_id	49829537	49829537
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
module	Agent	Agent
parent	None	None
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 54 metrics, 9 unstable metrics.

Startup time reports for petclinic

gantt
title petclinic - global startup overhead: candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.086 s) : 0, 1086427
Total [baseline] (10.605 s) : 0, 10604515
Agent [candidate] (1.094 s) : 0, 1094072
Total [candidate] (10.5 s) : 0, 10499775
section appsec
Agent [baseline] (1.225 s) : 0, 1224960
Total [baseline] (10.724 s) : 0, 10723703
Agent [candidate] (1.224 s) : 0, 1224438
Total [candidate] (10.725 s) : 0, 10725433
section iast
Agent [baseline] (1.222 s) : 0, 1222010
Total [baseline] (10.931 s) : 0, 10931262
Agent [candidate] (1.217 s) : 0, 1216705
Total [candidate] (10.922 s) : 0, 10921906
section profiling
Agent [baseline] (1.316 s) : 0, 1315919
Total [baseline] (10.763 s) : 0, 10762566
Agent [candidate] (1.311 s) : 0, 1310754
Total [candidate] (10.789 s) : 0, 10789219

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.086 s	-
Agent	appsec	1.225 s	138.534 ms (12.8%)
Agent	iast	1.222 s	135.583 ms (12.5%)
Agent	profiling	1.316 s	229.492 ms (21.1%)
Total	tracing	10.605 s	-
Total	appsec	10.724 s	119.188 ms (1.1%)
Total	iast	10.931 s	326.748 ms (3.1%)
Total	profiling	10.763 s	158.052 ms (1.5%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.094 s	-
Agent	appsec	1.224 s	130.366 ms (11.9%)
Agent	iast	1.217 s	122.633 ms (11.2%)
Agent	profiling	1.311 s	216.682 ms (19.8%)
Total	tracing	10.5 s	-
Total	appsec	10.725 s	225.659 ms (2.1%)
Total	iast	10.922 s	422.131 ms (4.0%)
Total	profiling	10.789 s	289.445 ms (2.8%)

gantt
title petclinic - break down per module: candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (690.42 ms) : 0, 690420
BytebuddyAgent [candidate] (696.245 ms) : 0, 696245
GlobalTracer [baseline] (316.614 ms) : 0, 316614
GlobalTracer [candidate] (318.847 ms) : 0, 318847
AppSec [baseline] (54.381 ms) : 0, 54381
AppSec [candidate] (55.128 ms) : 0, 55128
Remote Config [baseline] (699.351 µs) : 0, 699
Remote Config [candidate] (692.964 µs) : 0, 693
Telemetry [baseline] (10.638 ms) : 0, 10638
Telemetry [candidate] (9.354 ms) : 0, 9354
section appsec
BytebuddyAgent [baseline] (709.662 ms) : 0, 709662
BytebuddyAgent [candidate] (710.579 ms) : 0, 710579
GlobalTracer [baseline] (315.229 ms) : 0, 315229
GlobalTracer [candidate] (314.203 ms) : 0, 314203
AppSec [baseline] (168.081 ms) : 0, 168081
AppSec [candidate] (166.006 ms) : 0, 166006
IAST [baseline] (19.622 ms) : 0, 19622
IAST [candidate] (20.684 ms) : 0, 20684
Remote Config [baseline] (644.878 µs) : 0, 645
Remote Config [candidate] (646.145 µs) : 0, 646
Telemetry [baseline] (7.882 ms) : 0, 7882
Telemetry [candidate] (8.988 ms) : 0, 8988
section iast
BytebuddyAgent [baseline] (813.725 ms) : 0, 813725
BytebuddyAgent [candidate] (809.507 ms) : 0, 809507
GlobalTracer [baseline] (307.599 ms) : 0, 307599
GlobalTracer [candidate] (306.232 ms) : 0, 306232
AppSec [baseline] (57.832 ms) : 0, 57832
AppSec [candidate] (58.104 ms) : 0, 58104
IAST [baseline] (20.962 ms) : 0, 20962
IAST [candidate] (20.977 ms) : 0, 20977
Remote Config [baseline] (616.618 µs) : 0, 617
Remote Config [candidate] (616.613 µs) : 0, 617
Telemetry [baseline] (7.514 ms) : 0, 7514
Telemetry [candidate] (7.516 ms) : 0, 7516
section profiling
BytebuddyAgent [baseline] (686.925 ms) : 0, 686925
BytebuddyAgent [candidate] (683.742 ms) : 0, 683742
GlobalTracer [baseline] (435.283 ms) : 0, 435283
GlobalTracer [candidate] (432.871 ms) : 0, 432871
AppSec [baseline] (53.728 ms) : 0, 53728
AppSec [candidate] (53.583 ms) : 0, 53583
Remote Config [baseline] (659.63 µs) : 0, 660
Remote Config [candidate] (651.272 µs) : 0, 651
Telemetry [baseline] (7.7 ms) : 0, 7700
Telemetry [candidate] (7.646 ms) : 0, 7646
ProfilingAgent [baseline] (92.665 ms) : 0, 92665
ProfilingAgent [candidate] (93.366 ms) : 0, 93366
Profiling [baseline] (92.688 ms) : 0, 92688
Profiling [candidate] (93.39 ms) : 0, 93390

Startup time reports for insecure-bank

gantt
title insecure-bank - global startup overhead: candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.1 s) : 0, 1099679
Total [baseline] (8.73 s) : 0, 8729744
Agent [candidate] (1.096 s) : 0, 1095536
Total [candidate] (8.68 s) : 0, 8679681
section iast
Agent [baseline] (1.224 s) : 0, 1223670
Total [baseline] (9.212 s) : 0, 9211548
Agent [candidate] (1.219 s) : 0, 1219091
Total [candidate] (9.191 s) : 0, 9190900
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.228 s) : 0, 1227999
Total [baseline] (9.184 s) : 0, 9184056
Agent [candidate] (1.214 s) : 0, 1213785
Total [candidate] (9.184 s) : 0, 9184309
section iast_TELEMETRY_OFF
Agent [baseline] (1.223 s) : 0, 1222754
Total [baseline] (9.209 s) : 0, 9209368
Agent [candidate] (1.225 s) : 0, 1225420
Total [candidate] (9.241 s) : 0, 9241109

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.1 s	-
Agent	iast	1.224 s	123.991 ms (11.3%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.228 s	128.32 ms (11.7%)
Agent	iast_TELEMETRY_OFF	1.223 s	123.075 ms (11.2%)
Total	tracing	8.73 s	-
Total	iast	9.212 s	481.803 ms (5.5%)
Total	iast_HARDCODED_SECRET_DISABLED	9.184 s	454.311 ms (5.2%)
Total	iast_TELEMETRY_OFF	9.209 s	479.624 ms (5.5%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.096 s	-
Agent	iast	1.219 s	123.555 ms (11.3%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.214 s	118.249 ms (10.8%)
Agent	iast_TELEMETRY_OFF	1.225 s	129.884 ms (11.9%)
Total	tracing	8.68 s	-
Total	iast	9.191 s	511.219 ms (5.9%)
Total	iast_HARDCODED_SECRET_DISABLED	9.184 s	504.628 ms (5.8%)
Total	iast_TELEMETRY_OFF	9.241 s	561.428 ms (6.5%)

gantt
title insecure-bank - break down per module: candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (698.812 ms) : 0, 698812
BytebuddyAgent [candidate] (697.746 ms) : 0, 697746
GlobalTracer [baseline] (320.46 ms) : 0, 320460
GlobalTracer [candidate] (318.903 ms) : 0, 318903
AppSec [baseline] (55.107 ms) : 0, 55107
AppSec [candidate] (54.405 ms) : 0, 54405
Remote Config [baseline] (702.89 µs) : 0, 703
Remote Config [candidate] (684.101 µs) : 0, 684
Telemetry [baseline] (10.842 ms) : 0, 10842
Telemetry [candidate] (10.001 ms) : 0, 10001
section iast
BytebuddyAgent [baseline] (814.873 ms) : 0, 814873
BytebuddyAgent [candidate] (810.903 ms) : 0, 810903
GlobalTracer [baseline] (307.483 ms) : 0, 307483
GlobalTracer [candidate] (307.459 ms) : 0, 307459
AppSec [baseline] (57.023 ms) : 0, 57023
AppSec [candidate] (58.026 ms) : 0, 58026
IAST [baseline] (22.404 ms) : 0, 22404
IAST [candidate] (20.839 ms) : 0, 20839
Remote Config [baseline] (605.948 µs) : 0, 606
Remote Config [candidate] (602.769 µs) : 0, 603
Telemetry [baseline] (7.507 ms) : 0, 7507
Telemetry [candidate] (7.496 ms) : 0, 7496
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (816.838 ms) : 0, 816838
BytebuddyAgent [candidate] (808.045 ms) : 0, 808045
GlobalTracer [baseline] (310.338 ms) : 0, 310338
GlobalTracer [candidate] (305.969 ms) : 0, 305969
AppSec [baseline] (58.074 ms) : 0, 58074
AppSec [candidate] (57.371 ms) : 0, 57371
IAST [baseline] (20.827 ms) : 0, 20827
IAST [candidate] (20.697 ms) : 0, 20697
Remote Config [baseline] (605.31 µs) : 0, 605
Remote Config [candidate] (601.251 µs) : 0, 601
Telemetry [baseline] (7.532 ms) : 0, 7532
Telemetry [candidate] (7.391 ms) : 0, 7391
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (812.091 ms) : 0, 812091
BytebuddyAgent [candidate] (815.717 ms) : 0, 815717
GlobalTracer [baseline] (309.596 ms) : 0, 309596
GlobalTracer [candidate] (308.9 ms) : 0, 308900
AppSec [baseline] (58.313 ms) : 0, 58313
AppSec [candidate] (57.43 ms) : 0, 57430
IAST [baseline] (20.81 ms) : 0, 20810
IAST [candidate] (21.41 ms) : 0, 21410
Remote Config [baseline] (656.164 µs) : 0, 656
Remote Config [candidate] (631.016 µs) : 0, 631
Telemetry [baseline] (7.508 ms) : 0, 7508
Telemetry [candidate] (7.491 ms) : 0, 7491

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
end_time	2024-11-25T08:57:24	2024-11-25T09:04:20
git_branch	master	smola/x-forwarded
git_commit_date	1732489991	1732524487
git_commit_sha	`4925a50`	`ad3a959`
release_version	1.43.0-SNAPSHOT~4925a50233	1.43.0-SNAPSHOT~ad3a95960c
start_time	2024-11-25T08:57:10	2024-11-25T09:04:07

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1732525811	1732525811
ci_job_id	718405035	718405035
ci_pipeline_id	49829537	49829537
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 17 unstable metrics.

Request duration reports for insecure-bank

gantt
title insecure-bank - request duration [CI 0.99] : candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section baseline
no_agent (369.61 µs) : 350, 389
. : milestone, 370,
iast (484.912 µs) : 464, 506
. : milestone, 485,
iast_FULL (649.508 µs) : 628, 671
. : milestone, 650,
iast_GLOBAL (517.694 µs) : 495, 540
. : milestone, 518,
iast_HARDCODED_SECRET_DISABLED (485.476 µs) : 464, 507
. : milestone, 485,
iast_INACTIVE (452.831 µs) : 432, 474
. : milestone, 453,
iast_TELEMETRY_OFF (475.57 µs) : 454, 497
. : milestone, 476,
tracing (448.762 µs) : 428, 470
. : milestone, 449,
section candidate
no_agent (378.703 µs) : 358, 399
. : milestone, 379,
iast (488.103 µs) : 467, 510
. : milestone, 488,
iast_FULL (653.075 µs) : 632, 675
. : milestone, 653,
iast_GLOBAL (517.386 µs) : 496, 539
. : milestone, 517,
iast_HARDCODED_SECRET_DISABLED (490.613 µs) : 469, 512
. : milestone, 491,
iast_INACTIVE (450.011 µs) : 428, 472
. : milestone, 450,
iast_TELEMETRY_OFF (484.005 µs) : 462, 506
. : milestone, 484,
tracing (445.791 µs) : 424, 468
. : milestone, 446,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	369.61 µs [350.112 µs, 389.107 µs]	-
iast	484.912 µs [463.518 µs, 506.306 µs]	115.302 µs (31.2%)
iast_FULL	649.508 µs [627.848 µs, 671.169 µs]	279.898 µs (75.7%)
iast_GLOBAL	517.694 µs [495.357 µs, 540.031 µs]	148.084 µs (40.1%)
iast_HARDCODED_SECRET_DISABLED	485.476 µs [464.323 µs, 506.629 µs]	115.866 µs (31.3%)
iast_INACTIVE	452.831 µs [431.604 µs, 474.058 µs]	83.221 µs (22.5%)
iast_TELEMETRY_OFF	475.57 µs [454.009 µs, 497.131 µs]	105.961 µs (28.7%)
tracing	448.762 µs [427.742 µs, 469.782 µs]	79.152 µs (21.4%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	378.703 µs [358.454 µs, 398.952 µs]	-
iast	488.103 µs [466.647 µs, 509.559 µs]	109.401 µs (28.9%)
iast_FULL	653.075 µs [631.574 µs, 674.576 µs]	274.372 µs (72.5%)
iast_GLOBAL	517.386 µs [495.695 µs, 539.077 µs]	138.683 µs (36.6%)
iast_HARDCODED_SECRET_DISABLED	490.613 µs [469.081 µs, 512.144 µs]	111.91 µs (29.6%)
iast_INACTIVE	450.011 µs [428.44 µs, 471.581 µs]	71.308 µs (18.8%)
iast_TELEMETRY_OFF	484.005 µs [461.62 µs, 506.389 µs]	105.302 µs (27.8%)
tracing	445.791 µs [423.7 µs, 467.881 µs]	67.088 µs (17.7%)

Request duration reports for petclinic

gantt
title petclinic - request duration [CI 0.99] : candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section baseline
no_agent (1.343 ms) : 1324, 1363
. : milestone, 1343,
appsec (1.742 ms) : 1718, 1766
. : milestone, 1742,
appsec_no_iast (1.766 ms) : 1742, 1790
. : milestone, 1766,
iast (1.497 ms) : 1475, 1519
. : milestone, 1497,
profiling (1.497 ms) : 1473, 1520
. : milestone, 1497,
tracing (1.468 ms) : 1443, 1494
. : milestone, 1468,
section candidate
no_agent (1.359 ms) : 1340, 1379
. : milestone, 1359,
appsec (1.746 ms) : 1722, 1770
. : milestone, 1746,
appsec_no_iast (1.748 ms) : 1724, 1773
. : milestone, 1748,
iast (1.488 ms) : 1465, 1511
. : milestone, 1488,
profiling (1.488 ms) : 1465, 1512
. : milestone, 1488,
tracing (1.463 ms) : 1438, 1487
. : milestone, 1463,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.343 ms [1.324 ms, 1.363 ms]	-
appsec	1.742 ms [1.718 ms, 1.766 ms]	398.579 µs (29.7%)
appsec_no_iast	1.766 ms [1.742 ms, 1.79 ms]	422.84 µs (31.5%)
iast	1.497 ms [1.475 ms, 1.519 ms]	153.61 µs (11.4%)
profiling	1.497 ms [1.473 ms, 1.52 ms]	153.185 µs (11.4%)
tracing	1.468 ms [1.443 ms, 1.494 ms]	125.125 µs (9.3%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.359 ms [1.34 ms, 1.379 ms]	-
appsec	1.746 ms [1.722 ms, 1.77 ms]	386.307 µs (28.4%)
appsec_no_iast	1.748 ms [1.724 ms, 1.773 ms]	388.829 µs (28.6%)
iast	1.488 ms [1.465 ms, 1.511 ms]	128.907 µs (9.5%)
profiling	1.488 ms [1.465 ms, 1.512 ms]	128.966 µs (9.5%)
tracing	1.463 ms [1.438 ms, 1.487 ms]	103.084 µs (7.6%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	smola/x-forwarded
git_commit_date	1732489991	1732524487
git_commit_sha	`4925a50`	`ad3a959`
release_version	1.43.0-SNAPSHOT~4925a50233	1.43.0-SNAPSHOT~ad3a95960c

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1732526369	1732526369
ci_job_id	718405038	718405038
ci_pipeline_id	49829537	49829537
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
variant	appsec	appsec

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for tomcat

gantt
title tomcat - execution time [CI 0.99] : candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section baseline
no_agent (1.474 ms) : 1463, 1486
. : milestone, 1474,
appsec (2.361 ms) : 2320, 2403
. : milestone, 2361,
iast (2.103 ms) : 2050, 2156
. : milestone, 2103,
iast_GLOBAL (2.134 ms) : 2082, 2187
. : milestone, 2134,
profiling (1.972 ms) : 1930, 2014
. : milestone, 1972,
tracing (1.939 ms) : 1898, 1980
. : milestone, 1939,
section candidate
no_agent (1.47 ms) : 1458, 1481
. : milestone, 1470,
appsec (2.358 ms) : 2317, 2399
. : milestone, 2358,
iast (2.101 ms) : 2049, 2154
. : milestone, 2101,
iast_GLOBAL (2.136 ms) : 2084, 2189
. : milestone, 2136,
profiling (2.459 ms) : 2270, 2648
. : milestone, 2459,
tracing (1.939 ms) : 1899, 1980
. : milestone, 1939,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.474 ms [1.463 ms, 1.486 ms]	-
appsec	2.361 ms [2.32 ms, 2.403 ms]	886.907 µs (60.2%)
iast	2.103 ms [2.05 ms, 2.156 ms]	628.726 µs (42.6%)
iast_GLOBAL	2.134 ms [2.082 ms, 2.187 ms]	660.023 µs (44.8%)
profiling	1.972 ms [1.93 ms, 2.014 ms]	497.936 µs (33.8%)
tracing	1.939 ms [1.898 ms, 1.98 ms]	464.934 µs (31.5%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.47 ms [1.458 ms, 1.481 ms]	-
appsec	2.358 ms [2.317 ms, 2.399 ms]	888.257 µs (60.4%)
iast	2.101 ms [2.049 ms, 2.154 ms]	631.646 µs (43.0%)
iast_GLOBAL	2.136 ms [2.084 ms, 2.189 ms]	666.473 µs (45.3%)
profiling	2.459 ms [2.27 ms, 2.648 ms]	989.246 µs (67.3%)
tracing	1.939 ms [1.899 ms, 1.98 ms]	469.749 µs (32.0%)

Execution time for biojava

gantt
title biojava - execution time [CI 0.99] : candidate=1.43.0-SNAPSHOT~ad3a95960c, baseline=1.43.0-SNAPSHOT~4925a50233
dateFormat X
axisFormat %s
section baseline
no_agent (15.473 s) : 15473000, 15473000
. : milestone, 15473000,
appsec (15.111 s) : 15111000, 15111000
. : milestone, 15111000,
iast (18.627 s) : 18627000, 18627000
. : milestone, 18627000,
iast_GLOBAL (18.166 s) : 18166000, 18166000
. : milestone, 18166000,
profiling (14.856 s) : 14856000, 14856000
. : milestone, 14856000,
tracing (14.863 s) : 14863000, 14863000
. : milestone, 14863000,
section candidate
no_agent (15.438 s) : 15438000, 15438000
. : milestone, 15438000,
appsec (14.883 s) : 14883000, 14883000
. : milestone, 14883000,
iast (18.833 s) : 18833000, 18833000
. : milestone, 18833000,
iast_GLOBAL (18.01 s) : 18010000, 18010000
. : milestone, 18010000,
profiling (14.952 s) : 14952000, 14952000
. : milestone, 14952000,
tracing (14.912 s) : 14912000, 14912000
. : milestone, 14912000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.473 s [15.473 s, 15.473 s]	-
appsec	15.111 s [15.111 s, 15.111 s]	-362.0 ms (-2.3%)
iast	18.627 s [18.627 s, 18.627 s]	3.154 s (20.4%)
iast_GLOBAL	18.166 s [18.166 s, 18.166 s]	2.693 s (17.4%)
profiling	14.856 s [14.856 s, 14.856 s]	-617.0 ms (-4.0%)
tracing	14.863 s [14.863 s, 14.863 s]	-610.0 ms (-3.9%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.438 s [15.438 s, 15.438 s]	-
appsec	14.883 s [14.883 s, 14.883 s]	-555.0 ms (-3.6%)
iast	18.833 s [18.833 s, 18.833 s]	3.395 s (22.0%)
iast_GLOBAL	18.01 s [18.01 s, 18.01 s]	2.572 s (16.7%)
profiling	14.952 s [14.952 s, 14.952 s]	-486.0 ms (-3.1%)
tracing	14.912 s [14.912 s, 14.912 s]	-526.0 ms (-3.4%)

| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | [com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.49.0` -> `2.50.0` | | [com.google.cloud:google-cloud-core-http](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.48.0` -> `2.49.0` | | [com.google.cloud:google-cloud-spanner](https://github.com/googleapis/java-spanner) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `6.82.0` -> `6.83.0` | | [com.google.cloud:google-cloud-logging](https://github.com/googleapis/java-logging) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.20.7` -> `3.21.0` | | [com.google.cloud:google-cloud-datastore](https://github.com/googleapis/java-datastore) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.24.3` -> `2.25.1` | | [com.google.cloud:google-cloud-core](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.48.0` -> `2.49.0` | | [com.google.api:gax](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.58.0` -> `2.59.0` | | [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) | plugin | misk/gradle/libs.versions.toml | gradle | patch | `2.6.0` -> `2.6.1` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.43.0` -> `1.44.1` | | [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.43.0` -> `1.44.1` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [com.amazonaws:aws-java-sdk-sqs](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | | [com.amazonaws:aws-java-sdk-s3](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | | [com.amazonaws:aws-java-sdk-dynamodb](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | | [com.amazonaws:aws-java-sdk-core](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | --- ### Release Notes <details> <summary>googleapis/sdk-platform-java (com.google.api.grpc:proto-google-common-protos)</summary> ### [`v2.50.0`](https://github.com/googleapis/sdk-platform-java/blob/HEAD/CHANGELOG.md#2500-2024-11-14) ##### Features - Add experimental S2A integration in client libraries grpc transport ([#3326](googleapis/sdk-platform-java#3326)) ([1138ca6](googleapis/sdk-platform-java@1138ca6)) - enable selective generation based on service config include list ([#3323](googleapis/sdk-platform-java#3323)) ([0cddadb](googleapis/sdk-platform-java@0cddadb)) - introduce `java.time` to java-core ([#3330](googleapis/sdk-platform-java#3330)) ([f202c3b](googleapis/sdk-platform-java@f202c3b)) - Update Gapic-Generator to generate libraries using `java.time` methods ([#3321](googleapis/sdk-platform-java#3321)) ([b21c9a4](googleapis/sdk-platform-java@b21c9a4)) ##### Bug Fixes - Fix flaky test ScheduledRetryingExecutorTest.testCancelOuterFutureAfterStart ([#3335](googleapis/sdk-platform-java#3335)) ([e73740d](googleapis/sdk-platform-java@e73740d)) - httpjson callables to trace attempts (started, failed) ([#3300](googleapis/sdk-platform-java#3300)) ([15a64ee](googleapis/sdk-platform-java@15a64ee)) - instantiate GaxProperties at build time to ensure we get the protobuf version ([#3365](googleapis/sdk-platform-java#3365)) ([bb2a3be](googleapis/sdk-platform-java@bb2a3be)) - protobuf version not always getting set in headers ([#3322](googleapis/sdk-platform-java#3322)) ([7f6e470](googleapis/sdk-platform-java@7f6e470)) - use BuildKit instead of legacy builder to build the Hermetic Build images ([#3338](googleapis/sdk-platform-java#3338)) ([222fb45](googleapis/sdk-platform-java@222fb45)) ##### Dependencies - update google auth library dependencies to v1.30.0 ([#3367](googleapis/sdk-platform-java#3367)) ([a31c682](googleapis/sdk-platform-java@a31c682)) - update grpc dependencies to v1.68.1 ([#3240](googleapis/sdk-platform-java#3240)) ([c8e3941](googleapis/sdk-platform-java@c8e3941)) ##### Documentation - fix list num ([#3356](googleapis/sdk-platform-java#3356)) ([b7d6296](googleapis/sdk-platform-java@b7d6296)) - **hermetic-build:** indicate usage of Docker Buildkit in development guide ([#3337](googleapis/sdk-platform-java#3337)) ([01e742d](googleapis/sdk-platform-java@01e742d)) - modify hermetic build docs ([#3331](googleapis/sdk-platform-java#3331)) ([25023af](googleapis/sdk-platform-java@25023af)) </details> <details> <summary>googleapis/java-spanner (com.google.cloud:google-cloud-spanner)</summary> ### [`v6.83.0`](https://github.com/googleapis/java-spanner/blob/HEAD/CHANGELOG.md#6830-2024-12-13) ##### Features - Add Metrics host for built in metrics ([#3519](googleapis/java-spanner#3519)) ([4ed455a](googleapis/java-spanner@4ed455a)) - Add opt-in for using multiplexed sessions for blind writes ([#3540](googleapis/java-spanner#3540)) ([216f53e](googleapis/java-spanner@216f53e)) - Add UUID in Spanner TypeCode enum ([41f83dc](googleapis/java-spanner@41f83dc)) - Introduce java.time variables and methods ([#3495](googleapis/java-spanner#3495)) ([8a7d533](googleapis/java-spanner@8a7d533)) - **spanner:** Support multiplexed session for Partitioned operations ([#3231](googleapis/java-spanner#3231)) ([4501a3e](googleapis/java-spanner@4501a3e)) - Support 'set local' for retry_aborts_internally ([#3532](googleapis/java-spanner#3532)) ([331942f](googleapis/java-spanner@331942f)) ##### Bug Fixes - **deps:** Update the Java code generator (gapic-generator-java) to 2.51.0 ([41f83dc](googleapis/java-spanner@41f83dc)) ##### Dependencies - Update sdk platform java dependencies ([#3549](googleapis/java-spanner#3549)) ([6235f0f](googleapis/java-spanner@6235f0f)) </details> <details> <summary>googleapis/java-logging (com.google.cloud:google-cloud-logging)</summary> ### [`v3.21.0`](https://github.com/googleapis/java-logging/blob/HEAD/CHANGELOG.md#3210-2024-12-13) ##### Features - Introduce `java.time` methods ([#1729](googleapis/java-logging#1729)) ([323eb33](googleapis/java-logging@323eb33)) ##### Bug Fixes - **deps:** Update the Java code generator (gapic-generator-java) to 2.51.0 ([04d8868](googleapis/java-logging@04d8868)) ##### Dependencies - Update dependency io.opentelemetry:opentelemetry-bom to v1.45.0 ([#1638](googleapis/java-logging#1638)) ([7e007d4](googleapis/java-logging@7e007d4)) - Update sdk platform java dependencies ([#1736](googleapis/java-logging#1736)) ([88b4cdf](googleapis/java-logging@88b4cdf)) </details> <details> <summary>googleapis/java-datastore (com.google.cloud:google-cloud-datastore)</summary> ### [`v2.25.1`](https://github.com/googleapis/java-datastore/blob/HEAD/CHANGELOG.md#2251-2024-12-13) ##### Bug Fixes - **deps:** Update the Java code generator (gapic-generator-java) to 2.51.0 ([106ee4d](googleapis/java-datastore@106ee4d)) ##### Dependencies - Update sdk platform java dependencies ([#1685](googleapis/java-datastore#1685)) ([4372350](googleapis/java-datastore@4372350)) ### [`v2.25.0`](https://github.com/googleapis/java-datastore/blob/HEAD/CHANGELOG.md#2250-2024-12-11) ##### Features - Introduce `java.time` methods and variables ([#1671](googleapis/java-datastore#1671)) ([5a78a80](googleapis/java-datastore@5a78a80)) ##### Dependencies - Update dependency com.google.cloud:gapic-libraries-bom to v1.48.0 ([#1605](googleapis/java-datastore#1605)) ([5c6a678](googleapis/java-datastore@5c6a678)) ##### Documentation - Update gapic upgrade installation instructions ([#1677](googleapis/java-datastore#1677)) ([b3fbfcc](googleapis/java-datastore@b3fbfcc)) </details> <details> <summary>autonomousapps/dependency-analysis-android-gradle-plugin (com.autonomousapps.dependency-analysis)</summary> ### [`v2.6.1`](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/HEAD/CHANGELOG.md#Version-261) - \[Fix]: `superClassName` can be null (Object has no superclass). </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.44.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.44.1): 1.44.1 ##### Components ##### Continuous Integration Visibility - 🐛 Fix tracing JUnit5 tests in Maven projects with multiple forks ([#8089](DataDog/dd-trace-java#8089) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) ### [`v1.44.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.44.0): 1.44.0 ##### Known Issues > \[!WARNING]\ > This release contains a known issue that causes failures when using Test Optimization to trace JUnit 5 tests in a Maven project where Maven Surefire is configured with `forkCount` > 1. > The issue is fixed in v1.44.1 ##### Breaking Changes > \[!WARNING]\ > Support for `X-Forwarded` header is dropped from default client IP resolution. > It can still be re-activated using the `dd.trace.client-ip-header=x-forwarded` system property, or the `DD_TRACE_CLIENT_IP_HEADER=x-forwarded` environment variable. See [#7946](DataDog/dd-trace-java#7946). ##### Components ##### Application Security Management (IAST) - ✨ Set unexpected IAST exceptions to debug log level ([#8044](DataDog/dd-trace-java#8044) - [@smola](https://github.com/smola)) - ✨ Increase IAST propagation to StringBuffer subSequence ([#8038](DataDog/dd-trace-java#8038) - [@Mariovido](https://github.com/Mariovido)) - ✨ Increase IAST propagation to StringBuilder subSequence ([#8026](DataDog/dd-trace-java#8026) - [@Mariovido](https://github.com/Mariovido)) - ✨ Add IAST propagation to String valueOf ([#8013](DataDog/dd-trace-java#8013) - [@Mariovido](https://github.com/Mariovido)) - ✨ Increase IAST propagation to StringBuilder append ([#8010](DataDog/dd-trace-java#8010) - [@Mariovido](https://github.com/Mariovido)) - ✨ Expand SSRF support in IAST to apache-httpclient-5 and apache-httpasyncclient-4 ([#7920](DataDog/dd-trace-java#7920) - [@Mariovido](https://github.com/Mariovido)) ##### Build & Tooling - ✨ Generate Muzzle classes for Groovy instrumentations ([#8004](DataDog/dd-trace-java#8004) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) ##### Continuous Integration Visibility - ✨ Support distributed traces in tests ([#8078](DataDog/dd-trace-java#8078) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Implement fail-fast tests ordering for JUnit 5 ([#8055](DataDog/dd-trace-java#8055) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Mark JUnit 5 setup and teardown action spans as failed if there is an error ([#8033](DataDog/dd-trace-java#8033) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Add tracing of setup and teardown actions in JUnit 4 ([#8030](DataDog/dd-trace-java#8030) - [@daniel-mohedano](https://github.com/daniel-mohedano)) ##### Crash tracking - ✨ Improve crash tracking install logging ([#8045](DataDog/dd-trace-java#8045) - [@PerfectSlayer](https://github.com/PerfectSlayer)) ##### Data Streams Monitoring - 🐛 Add Data Streams support in AWS SQS without raw message delivery ([#8071](DataDog/dd-trace-java#8071) - [@piochelepiotr](https://github.com/piochelepiotr)) - ✨ Add new tag for enabled products / features to DSM checkpoints ([#8051](DataDog/dd-trace-java#8051) - [@kr-igor](https://github.com/kr-igor)) - 💡 Instrument self hosted Kafka connectors ([#7959](DataDog/dd-trace-java#7959) - [@piochelepiotr](https://github.com/piochelepiotr)) ##### Dynamic Instrumentation - ✨ Add Micronaut 4 support for code origin for spans ([#8039](DataDog/dd-trace-java#8039) - [@jpbempel](https://github.com/jpbempel)) - ✨ Refactor probe matching for methods ([#8021](DataDog/dd-trace-java#8021) - [@jpbempel](https://github.com/jpbempel)) - ✨ Update the CodeOriginProbe fingerprint to not rely on a stack walk ([#8016](DataDog/dd-trace-java#8016) - [@evanchooly](https://github.com/evanchooly)) - ✨ Implement code origin support for grpc server entry spans ([#7942](DataDog/dd-trace-java#7942) - [@evanchooly](https://github.com/evanchooly)) ##### GraalVM native-image - 🐛 Update Graal build-time instrumentation config for TracePropagationStyle ([#8065](DataDog/dd-trace-java#8065) - [@MattAlp](https://github.com/MattAlp)) - 🐛 Fix NoClassDefFoundError: Could not initialize class DDSpanLink$EncoderHolder in Graal native-image ([#8036](DataDog/dd-trace-java#8036) - [@mcculls](https://github.com/mcculls)) - 🐛🧹 Fix native-image generation of reactive applications ([#8012](DataDog/dd-trace-java#8012) - [@mcculls](https://github.com/mcculls)) ##### OpenTracing - 🧹 Custom ScopeManagers are deprecated and will be removed in a future release of dd-trace-ot ([#8058](DataDog/dd-trace-java#8058) - [@mcculls](https://github.com/mcculls)) ##### Tracer core - ✨🧪 Service naming: split by jee deployment ([#8064](DataDog/dd-trace-java#8064) - [@amarziali](https://github.com/amarziali)) - ✨ Exclude jboss mdb proxies from instrumenting ([#8061](DataDog/dd-trace-java#8061) - [@amarziali](https://github.com/amarziali)) - ✨ Add a built-in trace interceptor for keeping traces depending of their latency ([#8040](DataDog/dd-trace-java#8040) - [@cecile75](https://github.com/cecile75)) - 💡 Introduce marker mechanism for eagerly initializing helpers ([#8028](DataDog/dd-trace-java#8028) - [@mcculls](https://github.com/mcculls)) - 💡 Add JSON component ([#7973](DataDog/dd-trace-java#7973) - [@PerfectSlayer](https://github.com/PerfectSlayer)) - ✨⚠️ Remove support for X-Forwarded in client IP resolution ([#7946](DataDog/dd-trace-java#7946) - [@smola](https://github.com/smola)) ##### Instrumentations ##### Apache HttpComponents - ✨ Expand SSRF support in IAST to apache-httpclient-5 and apache-httpasyncclient-4 ([#7920](DataDog/dd-trace-java#7920) - [@Mariovido](https://github.com/Mariovido)) ##### gRPC instrumentation - 🐛 Use lower priorities for grpc server errors ([#8043](DataDog/dd-trace-java#8043) - [@amarziali](https://github.com/amarziali)) ##### JDBC instrumentation - ✨ Add trace injection for prepared statements in Postgres ([#7940](DataDog/dd-trace-java#7940) - [@nenadnoveljic](https://github.com/nenadnoveljic)) ##### JMS instrumentation - 🐛 Protect mdb from instrumenting multiple time the same event ([#8062](DataDog/dd-trace-java#8062) - [@amarziali](https://github.com/amarziali)) ##### Kafka instrumentation - 💡 Instrument self hosted Kafka connectors ([#7959](DataDog/dd-trace-java#7959) - [@piochelepiotr](https://github.com/piochelepiotr)) ##### OpenTelemetry instrumentation - 🐛 Support using OpenTelemetry Event API inside `@WithSpan` annotated method ([#8019](DataDog/dd-trace-java#8019) - [@mcculls](https://github.com/mcculls)) ##### Reactor instrumentation - 🐛🧹 Fix native-image generation of reactive applications ([#8012](DataDog/dd-trace-java#8012) - [@mcculls](https://github.com/mcculls)) ##### Spring instrumentation - 🐛 Avoid double instrumenting lambdas on latest spring scheduling ([#8005](DataDog/dd-trace-java#8005) - [@amarziali](https://github.com/amarziali)) ##### All other instrumentations - 🐛 Twilio: allow service name flattening ([#8025](DataDog/dd-trace-java#8025) - [@amarziali](https://github.com/amarziali)) - ✨ Instrument Mulesoft 4.5.0+ ([#7981](DataDog/dd-trace-java#7981) - [@amarziali](https://github.com/amarziali)) </details> <details> <summary>aws/aws-sdk-java (com.amazonaws:aws-java-sdk-sqs)</summary> ### [`v1.12.780`](https://github.com/aws/aws-sdk-java/blob/HEAD/CHANGELOG.md#112780-2024-12-11) [Compare Source](aws/aws-sdk-java@1.12.779...1.12.780) #### **Amazon Simple Storage Service** - ### Bugfixes - AWS SDK for Java 1.x now includes additional validation for Amazon S3 client APIs to handle scenarios where an empty string ('') is passed as the key argument to the following operations: PutObject, DeleteObject, ListObjects, GetObjectMetaData, ListObjectsV2, SetObjectTagging, GetObjectTagging, SetObjectAcl, GetObjectAcl, SetObjectLegalHold, GetObjectLegalHold, CopyObject, CopyPart, SelectObjectContent, SetObjectRetention, GetObjectRetention, AbortMultipartUpload, CompleteMultipartUpload, InitiateMultipartUpload, ListParts, UploadPart, RestoreObjectV2, and RestoreObject. The SDK will validate the key argument and throw an exception if it is an empty string, ensuring correct and expected behavior. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 69831bc62ea4d80cdcd42cef2aa9bd8eda28ae8c

What Does This Do Updates the resolver to include forwarded as one of the evaluated headers Follow the parsing order for headers defined in https://datadoghq.atlassian.net/wiki/spaces/SAAL/pages/2118779066 forwarded header should be parsed between x-client-ip and forwarded-for Motivation Additional Notes Rollback #7946 but changing X-forwarded for forwarded that is the correct one

| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | [com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.49.0` -> `2.50.0` | | [com.google.cloud:google-cloud-core-http](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.48.0` -> `2.49.0` | | [com.google.cloud:google-cloud-spanner](https://github.com/googleapis/java-spanner) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `6.82.0` -> `6.83.0` | | [com.google.cloud:google-cloud-logging](https://github.com/googleapis/java-logging) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.20.7` -> `3.21.0` | | [com.google.cloud:google-cloud-datastore](https://github.com/googleapis/java-datastore) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.24.3` -> `2.25.1` | | [com.google.cloud:google-cloud-core](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.48.0` -> `2.49.0` | | [com.google.api:gax](https://github.com/googleapis/sdk-platform-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.58.0` -> `2.59.0` | | [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) | plugin | misk/gradle/libs.versions.toml | gradle | patch | `2.6.0` -> `2.6.1` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.43.0` -> `1.44.1` | | [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.43.0` -> `1.44.1` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.29.32` -> `2.29.34` | | [com.amazonaws:aws-java-sdk-sqs](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | | [com.amazonaws:aws-java-sdk-s3](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | | [com.amazonaws:aws-java-sdk-dynamodb](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | | [com.amazonaws:aws-java-sdk-core](https://aws.amazon.com/sdkforjava) ([source](https://github.com/aws/aws-sdk-java)) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `1.12.779` -> `1.12.780` | --- ### Release Notes <details> <summary>googleapis/sdk-platform-java (com.google.api.grpc:proto-google-common-protos)</summary> ### [`v2.50.0`](https://github.com/googleapis/sdk-platform-java/blob/HEAD/CHANGELOG.md#2500-2024-11-14) ##### Features - Add experimental S2A integration in client libraries grpc transport ([#3326](googleapis/sdk-platform-java#3326)) ([1138ca6](googleapis/sdk-platform-java@1138ca6)) - enable selective generation based on service config include list ([#3323](googleapis/sdk-platform-java#3323)) ([0cddadb](googleapis/sdk-platform-java@0cddadb)) - introduce `java.time` to java-core ([#3330](googleapis/sdk-platform-java#3330)) ([f202c3b](googleapis/sdk-platform-java@f202c3b)) - Update Gapic-Generator to generate libraries using `java.time` methods ([#3321](googleapis/sdk-platform-java#3321)) ([b21c9a4](googleapis/sdk-platform-java@b21c9a4)) ##### Bug Fixes - Fix flaky test ScheduledRetryingExecutorTest.testCancelOuterFutureAfterStart ([#3335](googleapis/sdk-platform-java#3335)) ([e73740d](googleapis/sdk-platform-java@e73740d)) - httpjson callables to trace attempts (started, failed) ([#3300](googleapis/sdk-platform-java#3300)) ([15a64ee](googleapis/sdk-platform-java@15a64ee)) - instantiate GaxProperties at build time to ensure we get the protobuf version ([#3365](googleapis/sdk-platform-java#3365)) ([bb2a3be](googleapis/sdk-platform-java@bb2a3be)) - protobuf version not always getting set in headers ([#3322](googleapis/sdk-platform-java#3322)) ([7f6e470](googleapis/sdk-platform-java@7f6e470)) - use BuildKit instead of legacy builder to build the Hermetic Build images ([#3338](googleapis/sdk-platform-java#3338)) ([222fb45](googleapis/sdk-platform-java@222fb45)) ##### Dependencies - update google auth library dependencies to v1.30.0 ([#3367](googleapis/sdk-platform-java#3367)) ([a31c682](googleapis/sdk-platform-java@a31c682)) - update grpc dependencies to v1.68.1 ([#3240](googleapis/sdk-platform-java#3240)) ([c8e3941](googleapis/sdk-platform-java@c8e3941)) ##### Documentation - fix list num ([#3356](googleapis/sdk-platform-java#3356)) ([b7d6296](googleapis/sdk-platform-java@b7d6296)) - **hermetic-build:** indicate usage of Docker Buildkit in development guide ([#3337](googleapis/sdk-platform-java#3337)) ([01e742d](googleapis/sdk-platform-java@01e742d)) - modify hermetic build docs ([#3331](googleapis/sdk-platform-java#3331)) ([25023af](googleapis/sdk-platform-java@25023af)) </details> <details> <summary>googleapis/java-spanner (com.google.cloud:google-cloud-spanner)</summary> ### [`v6.83.0`](https://github.com/googleapis/java-spanner/blob/HEAD/CHANGELOG.md#6830-2024-12-13) ##### Features - Add Metrics host for built in metrics ([#3519](googleapis/java-spanner#3519)) ([4ed455a](googleapis/java-spanner@4ed455a)) - Add opt-in for using multiplexed sessions for blind writes ([#3540](googleapis/java-spanner#3540)) ([216f53e](googleapis/java-spanner@216f53e)) - Add UUID in Spanner TypeCode enum ([41f83dc](googleapis/java-spanner@41f83dc)) - Introduce java.time variables and methods ([#3495](googleapis/java-spanner#3495)) ([8a7d533](googleapis/java-spanner@8a7d533)) - **spanner:** Support multiplexed session for Partitioned operations ([#3231](googleapis/java-spanner#3231)) ([4501a3e](googleapis/java-spanner@4501a3e)) - Support 'set local' for retry_aborts_internally ([#3532](googleapis/java-spanner#3532)) ([331942f](googleapis/java-spanner@331942f)) ##### Bug Fixes - **deps:** Update the Java code generator (gapic-generator-java) to 2.51.0 ([41f83dc](googleapis/java-spanner@41f83dc)) ##### Dependencies - Update sdk platform java dependencies ([#3549](googleapis/java-spanner#3549)) ([6235f0f](googleapis/java-spanner@6235f0f)) </details> <details> <summary>googleapis/java-logging (com.google.cloud:google-cloud-logging)</summary> ### [`v3.21.0`](https://github.com/googleapis/java-logging/blob/HEAD/CHANGELOG.md#3210-2024-12-13) ##### Features - Introduce `java.time` methods ([#1729](googleapis/java-logging#1729)) ([323eb33](googleapis/java-logging@323eb33)) ##### Bug Fixes - **deps:** Update the Java code generator (gapic-generator-java) to 2.51.0 ([04d8868](googleapis/java-logging@04d8868)) ##### Dependencies - Update dependency io.opentelemetry:opentelemetry-bom to v1.45.0 ([#1638](googleapis/java-logging#1638)) ([7e007d4](googleapis/java-logging@7e007d4)) - Update sdk platform java dependencies ([#1736](googleapis/java-logging#1736)) ([88b4cdf](googleapis/java-logging@88b4cdf)) </details> <details> <summary>googleapis/java-datastore (com.google.cloud:google-cloud-datastore)</summary> ### [`v2.25.1`](https://github.com/googleapis/java-datastore/blob/HEAD/CHANGELOG.md#2251-2024-12-13) ##### Bug Fixes - **deps:** Update the Java code generator (gapic-generator-java) to 2.51.0 ([106ee4d](googleapis/java-datastore@106ee4d)) ##### Dependencies - Update sdk platform java dependencies ([#1685](googleapis/java-datastore#1685)) ([4372350](googleapis/java-datastore@4372350)) ### [`v2.25.0`](https://github.com/googleapis/java-datastore/blob/HEAD/CHANGELOG.md#2250-2024-12-11) ##### Features - Introduce `java.time` methods and variables ([#1671](googleapis/java-datastore#1671)) ([5a78a80](googleapis/java-datastore@5a78a80)) ##### Dependencies - Update dependency com.google.cloud:gapic-libraries-bom to v1.48.0 ([#1605](googleapis/java-datastore#1605)) ([5c6a678](googleapis/java-datastore@5c6a678)) ##### Documentation - Update gapic upgrade installation instructions ([#1677](googleapis/java-datastore#1677)) ([b3fbfcc](googleapis/java-datastore@b3fbfcc)) </details> <details> <summary>autonomousapps/dependency-analysis-android-gradle-plugin (com.autonomousapps.dependency-analysis)</summary> ### [`v2.6.1`](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/HEAD/CHANGELOG.md#Version-261) - \[Fix]: `superClassName` can be null (Object has no superclass). </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.44.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.44.1): 1.44.1 ##### Components ##### Continuous Integration Visibility - 🐛 Fix tracing JUnit5 tests in Maven projects with multiple forks ([#8089](DataDog/dd-trace-java#8089) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) ### [`v1.44.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.44.0): 1.44.0 ##### Known Issues > \[!WARNING]\ > This release contains a known issue that causes failures when using Test Optimization to trace JUnit 5 tests in a Maven project where Maven Surefire is configured with `forkCount` > 1. > The issue is fixed in v1.44.1 ##### Breaking Changes > \[!WARNING]\ > Support for `X-Forwarded` header is dropped from default client IP resolution. > It can still be re-activated using the `dd.trace.client-ip-header=x-forwarded` system property, or the `DD_TRACE_CLIENT_IP_HEADER=x-forwarded` environment variable. See [#7946](DataDog/dd-trace-java#7946). ##### Components ##### Application Security Management (IAST) - ✨ Set unexpected IAST exceptions to debug log level ([#8044](DataDog/dd-trace-java#8044) - [@smola](https://github.com/smola)) - ✨ Increase IAST propagation to StringBuffer subSequence ([#8038](DataDog/dd-trace-java#8038) - [@Mariovido](https://github.com/Mariovido)) - ✨ Increase IAST propagation to StringBuilder subSequence ([#8026](DataDog/dd-trace-java#8026) - [@Mariovido](https://github.com/Mariovido)) - ✨ Add IAST propagation to String valueOf ([#8013](DataDog/dd-trace-java#8013) - [@Mariovido](https://github.com/Mariovido)) - ✨ Increase IAST propagation to StringBuilder append ([#8010](DataDog/dd-trace-java#8010) - [@Mariovido](https://github.com/Mariovido)) - ✨ Expand SSRF support in IAST to apache-httpclient-5 and apache-httpasyncclient-4 ([#7920](DataDog/dd-trace-java#7920) - [@Mariovido](https://github.com/Mariovido)) ##### Build & Tooling - ✨ Generate Muzzle classes for Groovy instrumentations ([#8004](DataDog/dd-trace-java#8004) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) ##### Continuous Integration Visibility - ✨ Support distributed traces in tests ([#8078](DataDog/dd-trace-java#8078) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Implement fail-fast tests ordering for JUnit 5 ([#8055](DataDog/dd-trace-java#8055) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Mark JUnit 5 setup and teardown action spans as failed if there is an error ([#8033](DataDog/dd-trace-java#8033) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Add tracing of setup and teardown actions in JUnit 4 ([#8030](DataDog/dd-trace-java#8030) - [@daniel-mohedano](https://github.com/daniel-mohedano)) ##### Crash tracking - ✨ Improve crash tracking install logging ([#8045](DataDog/dd-trace-java#8045) - [@PerfectSlayer](https://github.com/PerfectSlayer)) ##### Data Streams Monitoring - 🐛 Add Data Streams support in AWS SQS without raw message delivery ([#8071](DataDog/dd-trace-java#8071) - [@piochelepiotr](https://github.com/piochelepiotr)) - ✨ Add new tag for enabled products / features to DSM checkpoints ([#8051](DataDog/dd-trace-java#8051) - [@kr-igor](https://github.com/kr-igor)) - 💡 Instrument self hosted Kafka connectors ([#7959](DataDog/dd-trace-java#7959) - [@piochelepiotr](https://github.com/piochelepiotr)) ##### Dynamic Instrumentation - ✨ Add Micronaut 4 support for code origin for spans ([#8039](DataDog/dd-trace-java#8039) - [@jpbempel](https://github.com/jpbempel)) - ✨ Refactor probe matching for methods ([#8021](DataDog/dd-trace-java#8021) - [@jpbempel](https://github.com/jpbempel)) - ✨ Update the CodeOriginProbe fingerprint to not rely on a stack walk ([#8016](DataDog/dd-trace-java#8016) - [@evanchooly](https://github.com/evanchooly)) - ✨ Implement code origin support for grpc server entry spans ([#7942](DataDog/dd-trace-java#7942) - [@evanchooly](https://github.com/evanchooly)) ##### GraalVM native-image - 🐛 Update Graal build-time instrumentation config for TracePropagationStyle ([#8065](DataDog/dd-trace-java#8065) - [@MattAlp](https://github.com/MattAlp)) - 🐛 Fix NoClassDefFoundError: Could not initialize class DDSpanLink$EncoderHolder in Graal native-image ([#8036](DataDog/dd-trace-java#8036) - [@mcculls](https://github.com/mcculls)) - 🐛🧹 Fix native-image generation of reactive applications ([#8012](DataDog/dd-trace-java#8012) - [@mcculls](https://github.com/mcculls)) ##### OpenTracing - 🧹 Custom ScopeManagers are deprecated and will be removed in a future release of dd-trace-ot ([#8058](DataDog/dd-trace-java#8058) - [@mcculls](https://github.com/mcculls)) ##### Tracer core - ✨🧪 Service naming: split by jee deployment ([#8064](DataDog/dd-trace-java#8064) - [@amarziali](https://github.com/amarziali)) - ✨ Exclude jboss mdb proxies from instrumenting ([#8061](DataDog/dd-trace-java#8061) - [@amarziali](https://github.com/amarziali)) - ✨ Add a built-in trace interceptor for keeping traces depending of their latency ([#8040](DataDog/dd-trace-java#8040) - [@cecile75](https://github.com/cecile75)) - 💡 Introduce marker mechanism for eagerly initializing helpers ([#8028](DataDog/dd-trace-java#8028) - [@mcculls](https://github.com/mcculls)) - 💡 Add JSON component ([#7973](DataDog/dd-trace-java#7973) - [@PerfectSlayer](https://github.com/PerfectSlayer)) - ✨⚠️ Remove support for X-Forwarded in client IP resolution ([#7946](DataDog/dd-trace-java#7946) - [@smola](https://github.com/smola)) ##### Instrumentations ##### Apache HttpComponents - ✨ Expand SSRF support in IAST to apache-httpclient-5 and apache-httpasyncclient-4 ([#7920](DataDog/dd-trace-java#7920) - [@Mariovido](https://github.com/Mariovido)) ##### gRPC instrumentation - 🐛 Use lower priorities for grpc server errors ([#8043](DataDog/dd-trace-java#8043) - [@amarziali](https://github.com/amarziali)) ##### JDBC instrumentation - ✨ Add trace injection for prepared statements in Postgres ([#7940](DataDog/dd-trace-java#7940) - [@nenadnoveljic](https://github.com/nenadnoveljic)) ##### JMS instrumentation - 🐛 Protect mdb from instrumenting multiple time the same event ([#8062](DataDog/dd-trace-java#8062) - [@amarziali](https://github.com/amarziali)) ##### Kafka instrumentation - 💡 Instrument self hosted Kafka connectors ([#7959](DataDog/dd-trace-java#7959) - [@piochelepiotr](https://github.com/piochelepiotr)) ##### OpenTelemetry instrumentation - 🐛 Support using OpenTelemetry Event API inside `@WithSpan` annotated method ([#8019](DataDog/dd-trace-java#8019) - [@mcculls](https://github.com/mcculls)) ##### Reactor instrumentation - 🐛🧹 Fix native-image generation of reactive applications ([#8012](DataDog/dd-trace-java#8012) - [@mcculls](https://github.com/mcculls)) ##### Spring instrumentation - 🐛 Avoid double instrumenting lambdas on latest spring scheduling ([#8005](DataDog/dd-trace-java#8005) - [@amarziali](https://github.com/amarziali)) ##### All other instrumentations - 🐛 Twilio: allow service name flattening ([#8025](DataDog/dd-trace-java#8025) - [@amarziali](https://github.com/amarziali)) - ✨ Instrument Mulesoft 4.5.0+ ([#7981](DataDog/dd-trace-java#7981) - [@amarziali](https://github.com/amarziali)) </details> <details> <summary>aws/aws-sdk-java (com.amazonaws:aws-java-sdk-sqs)</summary> ### [`v1.12.780`](https://github.com/aws/aws-sdk-java/blob/HEAD/CHANGELOG.md#112780-2024-12-11) [Compare Source](aws/aws-sdk-java@1.12.779...1.12.780) #### **Amazon Simple Storage Service** - ### Bugfixes - AWS SDK for Java 1.x now includes additional validation for Amazon S3 client APIs to handle scenarios where an empty string ('') is passed as the key argument to the following operations: PutObject, DeleteObject, ListObjects, GetObjectMetaData, ListObjectsV2, SetObjectTagging, GetObjectTagging, SetObjectAcl, GetObjectAcl, SetObjectLegalHold, GetObjectLegalHold, CopyObject, CopyPart, SelectObjectContent, SetObjectRetention, GetObjectRetention, AbortMultipartUpload, CompleteMultipartUpload, InitiateMultipartUpload, ListParts, UploadPart, RestoreObjectV2, and RestoreObject. The SDK will validate the key argument and throw an exception if it is an empty string, ensuring correct and expected behavior. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 69831bc62ea4d80cdcd42cef2aa9bd8eda28ae8c

smola changed the title ~~wip~~Remove support for X-Forwarded in client IP resolutionNov 13, 2024

smola added the comp: core Tracer core label Nov 22, 2024

smola force-pushed the smola/x-forwarded branch 2 times, most recently from c994881 to b9f3e12Compare November 25, 2024 07:38

Remove support for X-Forwarded in client IP resolution
ad3a959

smola force-pushed the smola/x-forwarded branch from b9f3e12 to ad3a959Compare November 25, 2024 08:48

smola marked this pull request as ready for review November 25, 2024 11:55

smola requested review from a team as code owners November 25, 2024 11:55

smola requested review from Mariovido and manuel-alvarez-alvarez November 25, 2024 11:55

manuel-alvarez-alvarez approved these changes Nov 28, 2024
View reviewed changes

smola merged commit 508c314 into masterNov 28, 2024

smola deleted the smola/x-forwarded branch November 28, 2024 14:55

github-actionsBot added this to the 1.44.0 milestone Nov 28, 2024

PerfectSlayer added type: feature Enhancements and improvements tag: breaking change Breaking changes labels Dec 12, 2024

smola mentioned this pull request Mar 3, 2025
[java] Enable Test_Config_ClientIPHeader_Precedence DataDog/system-tests#4237
Closed
7 tasks

jandro996 mentioned this pull request Aug 6, 2025
Add Forwarded header as a source to client IP resolution #9310
Merged

Navigation Menu

Uh oh!

Remove support for X-Forwarded in client IP resolution - #7946

Remove support for X-Forwarded in client IP resolution#7946
smola merged 1 commit into
masterfrom
smola/x-forwarded

smola commented Nov 13, 2024•
edited
Loading

Uh oh!

pr-commenterBot commented Nov 25, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

smola commented Nov 13, 2024• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What Does This Do

Motivation

Additional Notes

Contributor Checklist

Uh oh!

pr-commenterBot commented Nov 25, 2024

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

smola commented Nov 13, 2024•
edited
Loading