Agents

Agents are external processes that extend Sentinel’s functionality. They handle security policies, authentication, rate limiting, and custom business logic. The agents block configures how Sentinel connects to and communicates with these agents.

Basic Configuration

agents {
    agent "waf-agent" type="waf" {
        unix-socket "/var/run/sentinel/waf.sock"
        events "request_headers" "request_body"
        timeout-ms 200
        failure-mode "closed"
    }

    agent "auth-agent" type="auth" {
        grpc "http://localhost:50051"
        events "request_headers"
        timeout-ms 100
        failure-mode "closed"
        circuit-breaker {
            failure-threshold 5
            timeout-seconds 30
        }
    }
}

Agent Types

Type	Description
`waf`	Web Application Firewall
`auth`	Authentication and authorization
`rate_limit`	Rate limiting decisions
`custom`	Custom agent type (specify name)

Transports

Unix Socket

Low-latency local communication:

agent "local-agent" type="auth" {
    unix-socket "/var/run/sentinel/agent.sock"
    events "request_headers"
    timeout-ms 100
}

gRPC

Remote agent over HTTP/2:

agent "remote-agent" type="waf" {
    grpc "http://waf-service:50051"
    events "request_headers" "request_body"
    timeout-ms 200
}

With TLS:

agent "secure-agent" type="auth" {
    grpc "https://auth-service:50051" {
        ca-cert "/etc/sentinel/ca.crt"
        client-cert "/etc/sentinel/client.crt"
        client-key "/etc/sentinel/client.key"
    }
    events "request_headers"
}

HTTP

REST API agent using JSON over HTTP. This is the simplest transport option, making it easy to build agents in any language with HTTP support.

Basic HTTP

agent "http-agent" type="custom" {
    http "http://policy-service:8080/agent"
    events "request_headers"
    timeout-ms 150
}

HTTPS with TLS

agent "secure-http-agent" type="auth" {
    http "https://auth-service:8443/agent" {
        ca-cert "/etc/sentinel/certs/ca.crt"
    }
    events "request_headers"
    timeout-ms 100
}

HTTPS with mTLS

agent "mtls-agent" type="waf" {
    http "https://waf-service:8443/agent" {
        ca-cert "/etc/sentinel/certs/ca.crt"
        client-cert "/etc/sentinel/certs/client.crt"
        client-key "/etc/sentinel/certs/client.key"
    }
    events "request_headers" "request_body"
    timeout-ms 200
}

HTTP Protocol

Sentinel sends events as JSON POST requests:

POST /agent HTTP/1.1
Host: policy-service:8080
Content-Type: application/json
X-Sentinel-Protocol-Version: 1

{
  "version": 1,
  "event_type": "request_headers",
  "payload": {
    "metadata": {
      "correlation_id": "abc123",
      "request_id": "req-456",
      "client_ip": "192.168.1.100",
      "route_id": "api-route"
    },
    "method": "POST",
    "uri": "/api/users",
    "headers": {
      "content-type": ["application/json"],
      "authorization": ["Bearer token..."]
    }
  }
}

Agents respond with JSON:

{
  "version": 1,
  "decision": "allow",
  "request_headers": [
    {"set": {"name": "X-User-ID", "value": "user-123"}}
  ],
  "audit": {
    "tags": ["authenticated"],
    "rule_ids": ["auth-001"]
  }
}

When to Use HTTP

Use Case	Recommended Transport
Simple agents in any language	HTTP
High-throughput, low-latency	Unix Socket
Binary protocol, streaming	gRPC
Cross-network, load-balanced	HTTP or gRPC
Development/prototyping	HTTP

HTTP advantages:

Works with any language/framework that handles HTTP
Easy to debug with curl or browser tools
Simple JSON payloads
Standard load balancers and proxies work out of the box

HTTP trade-offs:

Higher overhead than Unix sockets
No streaming (full request/response per call)
JSON parsing overhead vs binary protocols

Events

Specify which lifecycle events the agent handles:

agent "waf-agent" type="waf" {
    unix-socket "/var/run/sentinel/waf.sock"
    events "request_headers" "request_body" "response_headers"
}

Event	Description
`request_headers`	HTTP request headers received
`request_body`	Request body chunks
`response_headers`	Upstream response headers received
`response_body`	Response body chunks
`log`	Request complete (for logging)
`websocket_frame`	WebSocket frames (after upgrade)

Failure Handling

Failure Mode

Configure behavior when the agent is unavailable:

agent "auth-agent" type="auth" {
    failure-mode "closed"   // Block requests if agent fails
}

agent "analytics-agent" type="custom" {
    failure-mode "open"     // Allow requests if agent fails
}

Mode	Behavior
`closed`	Block requests when agent unavailable (security-first)
`open`	Allow requests through when agent unavailable (availability-first)

Circuit Breaker

Prevent cascading failures with circuit breakers:

agent "waf-agent" type="waf" {
    circuit-breaker {
        failure-threshold 5         // Open after 5 failures
        success-threshold 2         // Close after 2 successes
        timeout-seconds 30          // Wait before half-open
        half-open-max-requests 1    // Requests in half-open state
    }
}

Option	Default	Description
`failure-threshold`	`5`	Failures to open circuit
`success-threshold`	`2`	Successes to close circuit
`timeout-seconds`	`30`	Seconds before half-open
`half-open-max-requests`	`1`	Test requests in half-open

Circuit breaker states:

Closed: Normal operation
Open: Agent bypassed (fails immediately)
Half-Open: Testing if agent recovered

Timeouts

agent "waf-agent" type="waf" {
    timeout-ms 200         // Total call timeout
    chunk-timeout-ms 5000  // Per-chunk timeout (streaming)
}

Body Processing

Body Size Limits

agent "waf-agent" type="waf" {
    max-request-body-bytes 10485760   // 10MB
    max-response-body-bytes 5242880   // 5MB
}

Body Streaming Modes

Control how bodies are sent to agents:

// Buffer entire body (default)
agent "waf-agent" type="waf" {
    request-body-mode "buffer"
    response-body-mode "buffer"
}

// Stream chunks as they arrive
agent "streaming-agent" type="custom" {
    request-body-mode "stream"
    chunk-timeout-ms 5000
}

// Hybrid: buffer small, stream large
agent "hybrid-agent" type="custom" {
    request-body-mode "hybrid:65536"   // Buffer up to 64KB
}

Mode	Description
`buffer`	Collect entire body before sending (default)
`stream`	Send chunks as they arrive
`hybrid:<bytes>`	Buffer up to threshold, then stream

WAF Body Inspection

For WAF agents that need to inspect request bodies, Sentinel provides a dedicated body inspection pipeline with security controls.

WAF Configuration Block

Configure body inspection globally via the waf block:

waf {
    body-inspection {
        inspect-request-body #true
        inspect-response-body #false
        max-body-inspection-bytes 1048576   // 1MB
        content-types "application/json" "application/x-www-form-urlencoded" "text/xml"
        decompress #true
        max-decompression-ratio 100.0
    }
}

Body Inspection Options

Option	Default	Description
`inspect-request-body`	`false`	Enable request body inspection
`inspect-response-body`	`false`	Enable response body inspection
`max-body-inspection-bytes`	`1048576`	Max bytes to buffer for inspection
`content-types`	See below	Content types eligible for inspection
`decompress`	`false`	Decompress bodies before inspection
`max-decompression-ratio`	`100.0`	Max compression ratio (zip bomb protection)

Default content types for inspection:

application/json
application/x-www-form-urlencoded
text/xml
application/xml
text/plain

Body Decompression

When decompress is enabled, Sentinel automatically decompresses request bodies before sending them to WAF agents. This allows WAF rules to inspect the actual content of compressed payloads.

Supported encodings:

gzip - Most common compression
deflate - Raw deflate compression
br - Brotli compression

Security protections:

Protection	Default	Description
Max ratio	100x	Prevents zip bombs (rejects if decompressed/compressed > ratio)
Max output size	10MB	Hard limit on decompressed size
Fail mode	Route setting	Uses route’s `failure-mode` for decompression errors

waf {
    body-inspection {
        decompress #true
        max-decompression-ratio 50.0    // Stricter limit for sensitive routes
    }
}

Decompression Behavior

Scenario	fail-open	fail-closed
Decompression succeeds	Inspect decompressed body	Inspect decompressed body
Ratio exceeded	Inspect compressed body	Block with 400
Size exceeded	Inspect compressed body	Block with 400
Invalid data	Inspect compressed body	Block with 400

Metrics

Decompression operations are tracked via Prometheus metrics:

Metric	Labels	Description
`sentinel_decompression_total`	`encoding`, `result`	Total decompression operations
`sentinel_decompression_ratio`	`encoding`	Histogram of compression ratios

Result labels: success, ratio_exceeded, size_exceeded, invalid_data, io_error

Complete WAF Example

waf {
    body-inspection {
        inspect-request-body #true
        max-body-inspection-bytes 1048576
        content-types "application/json" "application/xml" "text/plain"
        decompress #true
        max-decompression-ratio 100.0
    }
}

agents {
    agent "modsecurity" type="waf" {
        unix-socket "/var/run/sentinel/modsec.sock"
        events "request_headers" "request_body"
        timeout-ms 200
        failure-mode "closed"
        request-body-mode "buffer"
        circuit-breaker {
            failure-threshold 10
            timeout-seconds 60
        }
        config {
            rules-path "/etc/modsecurity/crs"
            paranoia-level 2
        }
    }
}

routes {
    route "api" {
        matches { path-prefix "/api/" }
        upstream "backend"
        policies {
            failure-mode "closed"   // Used for decompression errors
        }
        filters "waf-filter"
    }
}

filters {
    filter "waf-filter" {
        type "agent"
        agent "modsecurity"
        phase "request"
        failure-mode "closed"
    }
}

Agent-Specific Configuration

Pass configuration to agents via the config block:

agent "waf-agent" type="waf" {
    unix-socket "/var/run/sentinel/waf.sock"
    config {
        rules-path "/etc/sentinel/waf-rules"
        paranoia-level 2
        block-suspicious #true
    }
}

The configuration is passed to the agent when it connects.

Attaching Agents to Routes

Reference agents in route configuration:

routes {
    // Via filters
    route "api" {
        filters "waf-filter"   // Filter referencing agent
    }
}

filters {
    filter "waf-filter" {
        type "agent"
        agent "waf-agent"
        phase "request"
        timeout-ms 200
        failure-mode "closed"
    }
}

Complete Examples

WAF Agent

agents {
    agent "modsecurity" type="waf" {
        unix-socket "/var/run/sentinel/modsec.sock"
        events "request_headers" "request_body"
        timeout-ms 200
        failure-mode "closed"
        max-request-body-bytes 1048576    // 1MB for inspection
        request-body-mode "buffer"
        circuit-breaker {
            failure-threshold 10
            timeout-seconds 60
        }
        config {
            rules-path "/etc/modsecurity/crs"
            paranoia-level 1
        }
    }
}

Authentication Agent

agents {
    agent "jwt-auth" type="auth" {
        grpc "http://auth-service:50051"
        events "request_headers"
        timeout-ms 50
        failure-mode "closed"
        circuit-breaker {
            failure-threshold 5
            timeout-seconds 30
        }
        config {
            issuer "https://auth.example.com"
            audience "api.example.com"
        }
    }
}

Rate Limiting Agent

agents {
    agent "rate-limiter" type="rate_limit" {
        grpc "http://ratelimit-service:50051"
        events "request_headers"
        timeout-ms 20
        failure-mode "open"    // Allow through if service down
        circuit-breaker {
            failure-threshold 3
            timeout-seconds 15
        }
    }
}

Logging/Analytics Agent

agents {
    agent "analytics" type="custom" {
        http "http://analytics:8080/log"
        events "log"           // Only receive completion events
        timeout-ms 1000
        failure-mode "open"    // Don't block requests for logging
    }
}

TLS Configuration

Secure gRPC connections to agents with TLS and mutual TLS (mTLS).

TLS Options

Option	Description
`ca-cert`	Path to CA certificate for verifying the agent’s server certificate
`client-cert`	Path to client certificate for mTLS authentication
`client-key`	Path to client private key for mTLS authentication
`insecure-skip-verify`	Skip certificate verification (development only)

Server TLS (One-Way)

Verify the agent’s identity using TLS:

agent "secure-agent" type="auth" {
    grpc "https://auth-service.internal:50051" {
        ca-cert "/etc/sentinel/certs/ca.crt"
    }
    events "request_headers"
    timeout-ms 100
}

This configuration:

Encrypts traffic between Sentinel and the agent
Verifies the agent’s certificate against the provided CA
Automatically extracts domain name for SNI from the address

Mutual TLS (mTLS)

For bidirectional authentication where both Sentinel and the agent verify each other:

agent "secure-waf" type="waf" {
    grpc "https://waf-service.internal:50051" {
        ca-cert "/etc/sentinel/certs/ca.crt"
        client-cert "/etc/sentinel/certs/sentinel-client.crt"
        client-key "/etc/sentinel/certs/sentinel-client.key"
    }
    events "request_headers" "request_body"
    timeout-ms 200
    failure-mode "closed"
}

This configuration:

Encrypts traffic with TLS
Verifies the agent’s certificate against the CA
Presents Sentinel’s client certificate to the agent for verification
Provides strong mutual authentication for security-sensitive agents

Using System CA Store

When no ca-cert is specified, Sentinel uses the system’s native certificate store for server verification:

agent "public-agent" type="custom" {
    grpc "https://agent.example.com:50051"
    events "request_headers"
}

This works well for agents using certificates from public CAs (Let’s Encrypt, DigiCert, etc.).

Skip Verification (Development Only)

Warning: Only use this for local development. Never use in production.

agent "dev-agent" type="custom" {
    grpc "https://localhost:50051" {
        insecure-skip-verify
    }
    events "request_headers"
}

When enabled, Sentinel logs a security warning:

WARN: TLS certificate verification disabled for agent connection

Certificate Setup

Generate CA and Certificates

# Create CA
openssl genrsa -out ca.key 4096
openssl req -new -x509 -days 3650 -key ca.key -out ca.crt \
    -subj "/CN=Sentinel Agent CA"

# Create agent server certificate
openssl genrsa -out agent.key 2048
openssl req -new -key agent.key -out agent.csr \
    -subj "/CN=waf-service.internal"
openssl x509 -req -days 365 -in agent.csr -CA ca.crt -CAkey ca.key \
    -CAcreateserial -out agent.crt

# Create Sentinel client certificate (for mTLS)
openssl genrsa -out sentinel-client.key 2048
openssl req -new -key sentinel-client.key -out sentinel-client.csr \
    -subj "/CN=sentinel-proxy"
openssl x509 -req -days 365 -in sentinel-client.csr -CA ca.crt -CAkey ca.key \
    -CAcreateserial -out sentinel-client.crt

File Permissions

# Secure the private keys
chmod 600 /etc/sentinel/certs/*.key
chown sentinel:sentinel /etc/sentinel/certs/*

Complete Secure Agent Example

agents {
    // WAF with mTLS - highest security
    agent "modsecurity" type="waf" {
        grpc "https://waf.internal:50051" {
            ca-cert "/etc/sentinel/certs/ca.crt"
            client-cert "/etc/sentinel/certs/sentinel-client.crt"
            client-key "/etc/sentinel/certs/sentinel-client.key"
        }
        events "request_headers" "request_body"
        timeout-ms 200
        failure-mode "closed"
        circuit-breaker {
            failure-threshold 10
            timeout-seconds 60
        }
    }

    // Auth with server-only TLS
    agent "jwt-auth" type="auth" {
        grpc "https://auth.internal:50051" {
            ca-cert "/etc/sentinel/certs/ca.crt"
        }
        events "request_headers"
        timeout-ms 50
        failure-mode "closed"
    }

    // Rate limiter - internal network, no TLS
    agent "rate-limiter" type="rate_limit" {
        grpc "http://ratelimit.internal:50051"
        events "request_headers"
        timeout-ms 20
        failure-mode "open"
    }
}

Troubleshooting TLS

Error	Cause	Solution
`certificate verify failed`	CA doesn’t match agent cert	Verify CA certificate is correct
`certificate has expired`	Agent cert expired	Renew agent certificate
`handshake failure`	TLS version mismatch	Check both ends support TLS 1.2+
`unknown ca`	Missing CA cert	Add `ca-cert` option
`bad certificate`	Client cert rejected	Verify client cert signed by agent’s CA

Default Values

Setting	Default
`timeout-ms`	`1000` (1 second)
`failure-mode`	`open`
`chunk-timeout-ms`	`5000` (5 seconds)
`request-body-mode`	`buffer`
`response-body-mode`	`buffer`
`circuit-breaker.failure-threshold`	`5`
`circuit-breaker.success-threshold`	`2`
`circuit-breaker.timeout-seconds`	`30`
`circuit-breaker.half-open-max-requests`	`1`

Metrics

Agent-related metrics:

Metric	Description
`sentinel_agent_requests_total`	Agent calls by agent and status
`sentinel_agent_duration_seconds`	Agent call latency
`sentinel_agent_errors_total`	Agent errors
`sentinel_agent_timeouts_total`	Agent timeouts
`sentinel_agent_circuit_breaker_state`	Circuit breaker state

Configuration Validation

Sentinel validates agent configuration at startup:

Transport Validation

Transport	Validation
Unix Socket	Path exists and is a socket file
gRPC	Valid URL format (http/https with host)
HTTP	Valid URL format

Example validation errors:

Error: Agent 'auth' socket path '/var/run/sentinel/auth.sock' does not exist
Error: Agent 'waf' path '/tmp/not-a-socket' exists but is not a socket
Error: Agent 'remote' gRPC address 'invalid-url' is not a valid URL

Pre-flight Checks

Run validation before deployment:

sentinel --config sentinel.kdl --validate

This checks:

All referenced agents exist
Transport paths/URLs are valid
Timeout values are within bounds
Circuit breaker thresholds are valid

Next Steps

Agent Protocol - Wire protocol specification
Building Agents - Creating custom agents
Filters - Using agents in filter chains