Zafer Balkan

Now it is ready for review.

I used a new library that has TLD database and can dissect FQDN into TLD, Registerable Domain, and subdomains. If Technitium DNS has this capability, and I missed that, I...

Okay. I finished my performance optimizations. It is now using less memory allocations and is faster. I am keeping that new Library for better metadata. I'll update LogExporterApp with minor...

I will do some minor changes. I need a cache for the Nager.PublicSuffix results. It's slowing the resolution.

New version now adds a new metadata for anyone interested in enrichment or analysis context: `DomainInfo`. It includes `tld`, `baseDomain`, and `subdomain` fields for enriched log processing. ```json {"answers":[{"dnssecStatus":"Disabled","name":"google.co.uk","recordClass":"IN","recordData":"216.58.210.131","recordTtl":142,"recordType":"A"}],"clientIp":"127.0.0.1","edns":[],"nameServer":"127.0.0.1","protocol":"Udp","question":{"questionClass":"IN","questionName":"google.co.uk","questionType":"A"},"responseCode":"NoError","responseRtt":14.2574,"responseType":"Recursive","timestamp":"2025-12-05T13:18:50.457Z","domainInfo":{"tld":"co.uk","baseDomain":"google.co.uk","subdomain":""}} ```...

I will fix the copilot review issues, then make an enable/disable flag in config.

Converted log exporter to a proper log forwarder with a pipeline. It has now a single enrichment tool but it can be easily extended with current capability. An approach similar...

BTW, I use SIEVE caching algorithm for enrichment addition here. If you think it is useful, I can make it a Generic `SieveCache` so that it will be usable by...

For option 2, using kompose to convert to k8s and use something like microk8s or k3s be a viable pipeline until this issue is solved officially? It's just a thought...

Will the new engine be able to install/apply new rules without a service restart?