Add host and db name to tags injected in SQL comments by vandonr · Pull Request #6778 · DataDog/dd-trace-java

vandonr · 2024-03-06T10:22:09Z

What Does This Do

add more info to what's currently injected in SQL queries (via comments)

Motivation

https://datadoghq.atlassian.net/browse/AIT-9564

Additional Notes

Jira ticket: AIT-9564

same feature in other tracers:
DataDog/dd-trace-go#2550
DataDog/dd-trace-py#8286

pr-commenter · 2024-03-06T11:14:03Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	vandonr/payload
git_commit_date	1709707671	1709722064
git_commit_sha	`02d3cb7`	`20b0e74`
release_version	1.32.0-SNAPSHOT~02d3cb7aac	1.32.0-SNAPSHOT~20b0e74284

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1709725214	1709725214
ci_job_id	452179554	452179554
ci_pipeline_id	29597070	29597070
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
module	Agent	Agent
parent	None	None
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 48 metrics, 15 unstable metrics.

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.32.0-SNAPSHOT~20b0e74284, baseline=1.32.0-SNAPSHOT~02d3cb7aac

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.081 s) : 0, 1081070
Total [baseline] (8.566 s) : 0, 8565516
Agent [candidate] (1.09 s) : 0, 1089596
Total [candidate] (8.59 s) : 0, 8590269
section iast
Agent [baseline] (1.207 s) : 0, 1207360
Total [baseline] (9.04 s) : 0, 9040245
Agent [candidate] (1.212 s) : 0, 1211994
Total [candidate] (9.074 s) : 0, 9073603
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.216 s) : 0, 1215846
Total [baseline] (9.026 s) : 0, 9026241
Agent [candidate] (1.216 s) : 0, 1215899
Total [candidate] (9.018 s) : 0, 9018482
section iast_TELEMETRY_OFF
Agent [baseline] (1.21 s) : 0, 1210311
Total [baseline] (9.058 s) : 0, 9058479
Agent [candidate] (1.208 s) : 0, 1207922
Total [candidate] (9.038 s) : 0, 9037610

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.081 s	-
Agent	iast	1.207 s	126.29 ms (11.7%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.216 s	134.776 ms (12.5%)
Agent	iast_TELEMETRY_OFF	1.21 s	129.241 ms (12.0%)
Total	tracing	8.566 s	-
Total	iast	9.04 s	474.729 ms (5.5%)
Total	iast_HARDCODED_SECRET_DISABLED	9.026 s	460.725 ms (5.4%)
Total	iast_TELEMETRY_OFF	9.058 s	492.963 ms (5.8%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.09 s	-
Agent	iast	1.212 s	122.398 ms (11.2%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.216 s	126.303 ms (11.6%)
Agent	iast_TELEMETRY_OFF	1.208 s	118.326 ms (10.9%)
Total	tracing	8.59 s	-
Total	iast	9.074 s	483.333 ms (5.6%)
Total	iast_HARDCODED_SECRET_DISABLED	9.018 s	428.213 ms (5.0%)
Total	iast_TELEMETRY_OFF	9.038 s	447.34 ms (5.2%)

gantt
    title insecure-bank - break down per module: candidate=1.32.0-SNAPSHOT~20b0e74284, baseline=1.32.0-SNAPSHOT~02d3cb7aac

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (696.61 ms) : 0, 696610
BytebuddyAgent [candidate] (701.682 ms) : 0, 701682
GlobalTracer [baseline] (291.141 ms) : 0, 291141
GlobalTracer [candidate] (293.591 ms) : 0, 293591
AppSec [baseline] (50.536 ms) : 0, 50536
AppSec [candidate] (51.321 ms) : 0, 51321
Remote Config [baseline] (733.304 µs) : 0, 733
Remote Config [candidate] (740.496 µs) : 0, 740
Telemetry [baseline] (7.697 ms) : 0, 7697
Telemetry [candidate] (7.77 ms) : 0, 7770
section iast
BytebuddyAgent [baseline] (801.734 ms) : 0, 801734
BytebuddyAgent [candidate] (803.838 ms) : 0, 803838
GlobalTracer [baseline] (287.883 ms) : 0, 287883
GlobalTracer [candidate] (289.953 ms) : 0, 289953
AppSec [baseline] (54.858 ms) : 0, 54858
AppSec [candidate] (52.278 ms) : 0, 52278
Remote Config [baseline] (586.535 µs) : 0, 587
Remote Config [candidate] (597.929 µs) : 0, 598
Telemetry [baseline] (7.433 ms) : 0, 7433
Telemetry [candidate] (8.328 ms) : 0, 8328
IAST [baseline] (20.482 ms) : 0, 20482
IAST [candidate] (22.487 ms) : 0, 22487
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (806.988 ms) : 0, 806988
BytebuddyAgent [candidate] (807.327 ms) : 0, 807327
GlobalTracer [baseline] (290.59 ms) : 0, 290590
GlobalTracer [candidate] (290.451 ms) : 0, 290451
AppSec [baseline] (51.556 ms) : 0, 51556
AppSec [candidate] (51.973 ms) : 0, 51973
Remote Config [baseline] (598.258 µs) : 0, 598
Remote Config [candidate] (599.159 µs) : 0, 599
Telemetry [baseline] (6.676 ms) : 0, 6676
Telemetry [candidate] (7.579 ms) : 0, 7579
IAST [baseline] (24.708 ms) : 0, 24708
IAST [candidate] (23.321 ms) : 0, 23321
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (800.912 ms) : 0, 800912
BytebuddyAgent [candidate] (799.525 ms) : 0, 799525
GlobalTracer [baseline] (291.523 ms) : 0, 291523
GlobalTracer [candidate] (291.585 ms) : 0, 291585
AppSec [baseline] (51.895 ms) : 0, 51895
AppSec [candidate] (52.565 ms) : 0, 52565
Remote Config [baseline] (600.317 µs) : 0, 600
Remote Config [candidate] (597.839 µs) : 0, 598
Telemetry [baseline] (8.203 ms) : 0, 8203
Telemetry [candidate] (6.575 ms) : 0, 6575
IAST [baseline] (22.458 ms) : 0, 22458
IAST [candidate] (22.474 ms) : 0, 22474

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.32.0-SNAPSHOT~20b0e74284, baseline=1.32.0-SNAPSHOT~02d3cb7aac

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.086 s) : 0, 1085975
Total [baseline] (9.178 s) : 0, 9178197
Agent [candidate] (1.082 s) : 0, 1081912
Total [candidate] (9.185 s) : 0, 9185356
section appsec
Agent [baseline] (1.21 s) : 0, 1209650
Total [baseline] (9.371 s) : 0, 9370516
Agent [candidate] (1.206 s) : 0, 1205996
Total [candidate] (9.281 s) : 0, 9280652
section iast
Agent [baseline] (1.213 s) : 0, 1212697
Total [baseline] (9.356 s) : 0, 9355722
Agent [candidate] (1.207 s) : 0, 1206901
Total [candidate] (9.292 s) : 0, 9291838
section profiling
Agent [baseline] (1.273 s) : 0, 1273447
Total [baseline] (9.335 s) : 0, 9334815
Agent [candidate] (1.274 s) : 0, 1274239
Total [candidate] (9.333 s) : 0, 9333174

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.086 s	-
Agent	appsec	1.21 s	123.675 ms (11.4%)
Agent	iast	1.213 s	126.722 ms (11.7%)
Agent	profiling	1.273 s	187.472 ms (17.3%)
Total	tracing	9.178 s	-
Total	appsec	9.371 s	192.319 ms (2.1%)
Total	iast	9.356 s	177.525 ms (1.9%)
Total	profiling	9.335 s	156.618 ms (1.7%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.082 s	-
Agent	appsec	1.206 s	124.084 ms (11.5%)
Agent	iast	1.207 s	124.99 ms (11.6%)
Agent	profiling	1.274 s	192.327 ms (17.8%)
Total	tracing	9.185 s	-
Total	appsec	9.281 s	95.296 ms (1.0%)
Total	iast	9.292 s	106.482 ms (1.2%)
Total	profiling	9.333 s	147.818 ms (1.6%)

gantt
    title petclinic - break down per module: candidate=1.32.0-SNAPSHOT~20b0e74284, baseline=1.32.0-SNAPSHOT~02d3cb7aac

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (699.785 ms) : 0, 699785
BytebuddyAgent [candidate] (696.432 ms) : 0, 696432
GlobalTracer [baseline] (292.285 ms) : 0, 292285
GlobalTracer [candidate] (292.043 ms) : 0, 292043
AppSec [baseline] (50.976 ms) : 0, 50976
AppSec [candidate] (50.718 ms) : 0, 50718
Remote Config [baseline] (724.781 µs) : 0, 725
Remote Config [candidate] (731.301 µs) : 0, 731
Telemetry [baseline] (7.789 ms) : 0, 7789
Telemetry [candidate] (7.777 ms) : 0, 7777
section appsec
BytebuddyAgent [baseline] (700.623 ms) : 0, 700623
BytebuddyAgent [candidate] (697.89 ms) : 0, 697890
GlobalTracer [baseline] (292.868 ms) : 0, 292868
GlobalTracer [candidate] (292.151 ms) : 0, 292151
AppSec [baseline] (156.151 ms) : 0, 156151
AppSec [candidate] (156.37 ms) : 0, 156370
Remote Config [baseline] (614.114 µs) : 0, 614
Remote Config [candidate] (603.425 µs) : 0, 603
Telemetry [baseline] (6.876 ms) : 0, 6876
Telemetry [candidate] (6.868 ms) : 0, 6868
IAST [baseline] (17.93 ms) : 0, 17930
IAST [candidate] (17.778 ms) : 0, 17778
section iast
BytebuddyAgent [baseline] (804.924 ms) : 0, 804924
BytebuddyAgent [candidate] (800.294 ms) : 0, 800294
GlobalTracer [baseline] (289.633 ms) : 0, 289633
GlobalTracer [candidate] (288.491 ms) : 0, 288491
AppSec [baseline] (51.742 ms) : 0, 51742
AppSec [candidate] (51.127 ms) : 0, 51127
Remote Config [baseline] (603.578 µs) : 0, 604
Remote Config [candidate] (585.014 µs) : 0, 585
Telemetry [baseline] (6.846 ms) : 0, 6846
Telemetry [candidate] (7.445 ms) : 0, 7445
IAST [baseline] (24.442 ms) : 0, 24442
IAST [candidate] (24.712 ms) : 0, 24712
section profiling
ProfilingAgent [baseline] (93.105 ms) : 0, 93105
ProfilingAgent [candidate] (93.315 ms) : 0, 93315
BytebuddyAgent [baseline] (689.726 ms) : 0, 689726
BytebuddyAgent [candidate] (690.007 ms) : 0, 690007
GlobalTracer [baseline] (373.855 ms) : 0, 373855
GlobalTracer [candidate] (374.331 ms) : 0, 374331
AppSec [baseline] (52.471 ms) : 0, 52471
AppSec [candidate] (52.256 ms) : 0, 52256
Remote Config [baseline] (782.012 µs) : 0, 782
Remote Config [candidate] (783.948 µs) : 0, 784
Telemetry [baseline] (7.347 ms) : 0, 7347
Telemetry [candidate] (7.41 ms) : 0, 7410
Profiling [baseline] (93.131 ms) : 0, 93131
Profiling [candidate] (93.341 ms) : 0, 93341

Load

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.32.0-SNAPSHOT~20b0e74284, baseline=1.32.0-SNAPSHOT~02d3cb7aac
    dateFormat X
    axisFormat %s
section baseline
no_agent (359.892 µs) : 340, 380
.   : milestone, 360,
iast (468.48 µs) : 448, 489
.   : milestone, 468,
iast_FULL (533.667 µs) : 513, 554
.   : milestone, 534,
iast_GLOBAL (496.439 µs) : 476, 517
.   : milestone, 496,
iast_HARDCODED_SECRET_DISABLED (469.562 µs) : 449, 490
.   : milestone, 470,
iast_INACTIVE (443.812 µs) : 423, 464
.   : milestone, 444,
iast_TELEMETRY_OFF (469.579 µs) : 448, 491
.   : milestone, 470,
tracing (444.505 µs) : 423, 466
.   : milestone, 445,
section candidate
no_agent (363.368 µs) : 343, 383
.   : milestone, 363,
iast (470.458 µs) : 450, 491
.   : milestone, 470,
iast_FULL (534.874 µs) : 514, 555
.   : milestone, 535,
iast_GLOBAL (488.08 µs) : 468, 508
.   : milestone, 488,
iast_HARDCODED_SECRET_DISABLED (462.442 µs) : 442, 483
.   : milestone, 462,
iast_INACTIVE (448.145 µs) : 428, 469
.   : milestone, 448,
iast_TELEMETRY_OFF (464.676 µs) : 444, 485
.   : milestone, 465,
tracing (439.961 µs) : 420, 460
.   : milestone, 440,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	359.892 µs [339.59 µs, 380.194 µs]	-
iast	468.48 µs [448.118 µs, 488.843 µs]	108.588 µs (30.2%)
iast_FULL	533.667 µs [513.411 µs, 553.924 µs]	173.775 µs (48.3%)
iast_GLOBAL	496.439 µs [475.766 µs, 517.112 µs]	136.547 µs (37.9%)
iast_HARDCODED_SECRET_DISABLED	469.562 µs [448.709 µs, 490.414 µs]	109.67 µs (30.5%)
iast_INACTIVE	443.812 µs [423.475 µs, 464.149 µs]	83.92 µs (23.3%)
iast_TELEMETRY_OFF	469.579 µs [448.495 µs, 490.663 µs]	109.687 µs (30.5%)
tracing	444.505 µs [423.181 µs, 465.83 µs]	84.614 µs (23.5%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	363.368 µs [343.259 µs, 383.476 µs]	-
iast	470.458 µs [449.834 µs, 491.081 µs]	107.09 µs (29.5%)
iast_FULL	534.874 µs [514.329 µs, 555.42 µs]	171.506 µs (47.2%)
iast_GLOBAL	488.08 µs [467.866 µs, 508.295 µs]	124.713 µs (34.3%)
iast_HARDCODED_SECRET_DISABLED	462.442 µs [442.124 µs, 482.76 µs]	99.075 µs (27.3%)
iast_INACTIVE	448.145 µs [427.5 µs, 468.79 µs]	84.777 µs (23.3%)
iast_TELEMETRY_OFF	464.676 µs [444.044 µs, 485.308 µs]	101.308 µs (27.9%)
tracing	439.961 µs [419.897 µs, 460.025 µs]	76.593 µs (21.1%)

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.32.0-SNAPSHOT~20b0e74284, baseline=1.32.0-SNAPSHOT~02d3cb7aac
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.351 ms) : 1331, 1370
.   : milestone, 1351,
appsec (1.767 ms) : 1742, 1791
.   : milestone, 1767,
iast (1.536 ms) : 1513, 1559
.   : milestone, 1536,
profiling (1.533 ms) : 1508, 1558
.   : milestone, 1533,
tracing (1.519 ms) : 1496, 1542
.   : milestone, 1519,
section candidate
no_agent (1.356 ms) : 1337, 1375
.   : milestone, 1356,
appsec (1.764 ms) : 1741, 1788
.   : milestone, 1764,
iast (1.529 ms) : 1506, 1552
.   : milestone, 1529,
profiling (1.582 ms) : 1558, 1607
.   : milestone, 1582,
tracing (1.477 ms) : 1454, 1500
.   : milestone, 1477,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.351 ms [1.331 ms, 1.37 ms]	-
appsec	1.767 ms [1.742 ms, 1.791 ms]	416.026 µs (30.8%)
iast	1.536 ms [1.513 ms, 1.559 ms]	185.55 µs (13.7%)
profiling	1.533 ms [1.508 ms, 1.558 ms]	182.721 µs (13.5%)
tracing	1.519 ms [1.496 ms, 1.542 ms]	168.649 µs (12.5%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.356 ms [1.337 ms, 1.375 ms]	-
appsec	1.764 ms [1.741 ms, 1.788 ms]	408.308 µs (30.1%)
iast	1.529 ms [1.506 ms, 1.552 ms]	172.807 µs (12.7%)
profiling	1.582 ms [1.558 ms, 1.607 ms]	226.256 µs (16.7%)
tracing	1.477 ms [1.454 ms, 1.5 ms]	120.834 µs (8.9%)

vandonr added 2 commits March 6, 2024 11:12

add host and db name to tags injected in SQL comments

d8bc9f4

fix benchmark

20b0e74

vandonr marked this pull request as ready for review March 6, 2024 13:22

vandonr requested a review from a team as a code owner March 6, 2024 13:22

vandonr requested review from am312, amarziali and dougqh March 6, 2024 13:22

dougqh approved these changes Mar 6, 2024

View reviewed changes

vandonr mentioned this pull request Mar 6, 2024

Add db name & host to sql injected tags DataDog/dd-trace-dotnet#5278

Merged

vandonr merged commit 30e6c93 into master Mar 6, 2024

vandonr deleted the vandonr/payload branch March 6, 2024 16:20

github-actions Bot added this to the 1.32.0 milestone Mar 6, 2024

PerfectSlayer added the inst: jdbc JDBC instrumentation label Apr 4, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add host and db name to tags injected in SQL comments#6778

Add host and db name to tags injected in SQL comments#6778
vandonr merged 2 commits into
masterfrom
vandonr/payload

vandonr commented Mar 6, 2024 •

edited by atlassian Bot

Loading

Uh oh!

pr-commenter Bot commented Mar 6, 2024 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

vandonr commented Mar 6, 2024 • edited by atlassian Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What Does This Do

Motivation

Additional Notes

Uh oh!

pr-commenter Bot commented Mar 6, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Benchmarks

Startup

Parameters

Summary

Load

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

vandonr commented Mar 6, 2024 •

edited by atlassian Bot

Loading

pr-commenter Bot commented Mar 6, 2024 •

edited

Loading