Skip to content

Cerberus Client Logging: Secure C# logging library with encryption and multi-pathway support.

License

Notifications You must be signed in to change notification settings

Zeroshi/Cerbi-CerbiStream

Repository files navigation

CerbiStream: Dev-Friendly Logging for .NET

NuGet Downloads License .NET

Dev Friendly Governance Enforced

Cerbi CI Quality Gate

πŸš€ View CerbiStream Benchmarks

Compare against Serilog, NLog, and others. CerbiStream is tuned for performance, governance, and enterprise-scale routing.


βœ… Highlights

  • Works with ILogger<T>
  • Structured logging enforcement
  • Supports RabbitMQ, Kafka, Azure, AWS, GCP queues
  • Flexible encryption (None, Base64, AES)
  • Schema enforcement with GovernanceAnalyzer
  • πŸ” Queue-first architecture (sink-agnostic)

✨ What's New in v1.0.11

  • New presets: BenchmarkMode(), EnableDeveloperModeWithTelemetry()
  • Toggle: telemetry, console, metadata, governance
  • JSON conversion with encryption
  • Queue routing using enums

🧰 Install

dotnet add package CerbiStream

Optional governance analyzer:

dotnet add package CerbiStream.GovernanceAnalyzer

⚑ Quick Start

builder.Logging.AddCerbiStreamWithRouting(options =>
{
    options.WithQueue("RabbitMQ", "localhost", "logs-queue")
           .EnableDeveloperModeWithoutTelemetry()
           .WithEncryptionMode(EncryptionType.Base64);
});

πŸ” Runtime Encryption

options.WithEncryptionMode(EncryptionType.AES)
       .WithEncryptionKey(myKey, myIV);

Default (lazy) test keys:

var (key, iv) = EncryptionHelpers.GetInsecureDefaultKeyPair();
options.WithEncryptionKey(key, iv);

KeyVault example:

var key = Convert.FromBase64String(await secretClient.GetSecret("CerbiKey"));
var iv = Convert.FromBase64String(await secretClient.GetSecret("CerbiIV"));

πŸ› οΈ Preset Modes

Method Description
EnableDeveloperModeWithTelemetry() Console + telemetry + metadata
EnableDeveloperModeWithoutTelemetry() Console + metadata, no telemetry
EnableDevModeMinimal() Console only
EnableBenchmarkMode() Silent mode (no telemetry, queue, or console)

πŸ” Retry Example

Policy
  .Handle<Exception>()
  .WaitAndRetry(3, _ => TimeSpan.FromSeconds(1), (ex, _, attempt, _) =>
  {
      TelemetryContext.IsRetry = true;
      TelemetryContext.RetryAttempt = attempt;
  });

πŸ”§ Configuration Options

Option Description
.WithQueue(...) Configure queue host, name, and type
.DisableQueue() Stops sending logs to queues
.WithTelemetryProvider() Set custom telemetry provider
.IncludeSecurityMetadata() Adds IP/UserID info
.EnableTelemetryLogging() Sends to telemetry even if queue is disabled

πŸ“Š Telemetry Provider Support

Provider Supported
OpenTelemetry βœ…
Azure App Insights βœ…
AWS CloudWatch βœ…
GCP Trace βœ…
Datadog βœ…

πŸ“˜ Code Samples

CerbiLoggerBuilder

var logger = new CerbiLoggerBuilder()
    .UseAzureServiceBus("<conn>", "<queue>")
    .EnableDebugMode()
    .Build(logger, new ConvertToJson(), new NoOpEncryption());

Fluent API

var options = new CerbiStreamOptions()
    .WithEncryptionMode(EncryptionType.Base64)
    .WithQueue("RabbitMQ", "localhost", "logs");

AddCerbiStreamWithRouting (DI)

builder.Logging.AddCerbiStreamWithRouting(options =>
{
    options.WithQueue("AzureServiceBus", "sb://...", "queue")
           .WithEncryptionMode(EncryptionType.AES);
});

πŸ§ͺ Unit Test Example

var mockQueue = Substitute.For<IQueue>();
var logger = new Logging(Substitute.For<ILogger<Logging>>(), mockQueue, new ConvertToJson(), new NoOpEncryption());

var result = await logger.LogEventAsync("Test", LogLevel.Information);
Assert.True(result);

🌐 Supported Queues

  • RabbitMQ
  • Kafka
  • Azure Queue / Service Bus
  • AWS SQS / Kinesis
  • Google Pub/Sub

🧡 Queue-First Logging (Sink-Agnostic)

CerbiStream does not directly send logs to sinks like Splunk, Elastic, or Blob.

Instead:

  • πŸ” Logs are emitted to queues only (Kafka, RabbitMQ, Azure, etc.)
  • 🧠 CerbIQ reads from these queues and sends logs to sinks
  • βœ… Keeps log generation decoupled from log delivery

This design gives you:

  • Better performance
  • Retry-friendly resilience
  • Pluggable downstream integrations

➑️ Add CerbIQ to handle routing and sink delivery.


πŸ” Governance Enforcement (Optional)

{
  "LoggingProfiles": {
    "SecurityLog": {
      "RequiredFields": ["UserId", "IPAddress"],
      "OptionalFields": ["DeviceType"]
    }
  }
}

πŸ“œ License

MIT


Star the repo ⭐ β€” Contribute πŸ”§ β€” File issues πŸ›

Created by @Zeroshi

About

Cerberus Client Logging: Secure C# logging library with encryption and multi-pathway support.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages