Function protocolMatches

pkg/cli/firewall_policy.go:259–269

protocolMatches checks if a rule's protocol constraint matches the request. "both" matches everything; "https" matches only HTTPS; "http" matches only HTTP.

(rule PolicyRule, isHTTPS bool)

// protocolMatches checks if a rule's protocol constraint matches the request.
// "both" matches everything; "https" matches only HTTPS; "http" matches only HTTP.
func protocolMatches(rule PolicyRule, isHTTPS bool) bool {
	switch strings.ToLower(rule.Protocol) {
	case "https":
		return isHTTPS
	case "http":
		return !isHTTPS
	default:
		// "both" or empty — matches everything
		return true
	}
}

// findMatchingRule finds the first matching policy rule for a given audit entry.
// Rules are evaluated in order; the first matching rule wins.