Performance drop with larger request body

[dvershinin]

We are evaluating Coraza WAF and have observed significant performance degradation when processing larger request bodies. Specifically, starting from a request body size of around 200 bytes, Coraza’s throughput decreases by 2 to 3 times compared to ModSecurity using the same OWASP Core Rule Set (CRS) v4.

Is this a known issue with Coraza’s handling of larger request bodies?

[fzipi]

200bytes only? That sound awful. Do you have benchmarks that can be shared?

CC: @jptosso

[jptosso]

Also, what is the connector?
If this is custom code, any chance you could share a pprof profile?

https://jvns.ca/blog/2017/09/24/profiling-go-with-pprof/