-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathedge-observations.yaml
77 lines (74 loc) · 2.06 KB
/
edge-observations.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
$schema: https://json-schema.org/draft/2020-12/schema
$id: https://schema.dnstapir.se/v1/core_observation
title: DNS TAPIR CORE Observations
description: Schema for DNS TAPIR CORE observations going from CORE to EDGE
type: object
required:
- src_name
- creator
- msg_type
- list_type
- added
- removed
- msg
- timestamp
- time_str
properties:
message_id:
type: string
format: uuid
src_name:
description: The name of the intelligence source, must match config in POP
type: string
creator:
description: Who was responsible for creating the observation
type: string
msg_type:
description: What type of information is carried within this message
type: string
enum: ["observation"]
list_type:
description: What type of list this observation should be added to/removed from
type: string
enum: ["allowlist", "doubtlist", "denylist"]
added:
description: Observations about a domain that are to be added
type: array
items:
$ref: '#/$defs/observation'
removed:
description: Observations about a domain that are to be removed
type: array
items:
$ref: '#/$defs/observation'
msg:
description: An arbitrary text message for general purposes, such as debugging
type: string
timestamp:
description: A timestamp for when this message was received
type: string
format: date-time
time_str:
description: Not used
type: string
$defs:
observation:
description: An observation made about a domain
type: object
properties:
name:
description: The domain name for which the observation is valid
type: string
time_added:
description: The point in time when the observation was made
type: string
format: date-time
ttl:
description: For how long the observation should be considered valid
type: integer
tag_mask:
description: Observations made about the domain, encoded as bits in a 32-bit word
type: integer
extended_tags:
description: Not used
type: array