watchdog/internal/aggregate/uniques.go
NotAShelf 8392992b41
internal/aggregate: optimize HyperLogLog to prevent O(16384) operations
Signed-off-by: NotAShelf <raf@notashelf.dev>
Change-Id: Ibc7e6d7a86e8679e299c46debee9683f6a6a6964
2026-03-02 22:38:03 +03:00

127 lines
3 KiB
Go

package aggregate
import (
"bytes"
"crypto/sha256"
"encoding/hex"
"fmt"
"os"
"sync"
"time"
"github.com/axiomhq/hyperloglog"
)
// UniquesEstimator tracks unique visitors using HyperLogLog with daily salt rotation
type UniquesEstimator struct {
hll *hyperloglog.Sketch
currentDay string
mu sync.Mutex
}
// NewUniquesEstimator creates a new unique visitor estimator
func NewUniquesEstimator() *UniquesEstimator {
return &UniquesEstimator{
hll: hyperloglog.New(),
currentDay: dailySalt(time.Now()),
}
}
// Add records a visitor with privacy-preserving hashing
// Uses IP + UserAgent + daily salt to prevent cross-day correlation
func (u *UniquesEstimator) Add(ip, userAgent string) {
u.mu.Lock()
defer u.mu.Unlock()
// Check if we need to rotate to a new day
today := dailySalt(time.Now())
if today != u.currentDay {
// Reset HLL for new day
u.hll = hyperloglog.New()
u.currentDay = today
}
// Hash visitor with daily salt to prevent cross-day tracking
hash := hashVisitor(ip, userAgent, u.currentDay)
u.hll.Insert([]byte(hash))
}
// Estimate returns the estimated number of unique visitors
func (u *UniquesEstimator) Estimate() uint64 {
u.mu.Lock()
defer u.mu.Unlock()
return u.hll.Estimate()
}
// dailySalt generates a deterministic salt based on the current date
// Same day = same salt, different day = different salt
func dailySalt(t time.Time) string {
// Use UTC to ensure consistent rotation regardless of timezone
date := t.UTC().Format("2006-01-02")
h := sha256.Sum256([]byte("watchdog-salt-" + date))
return hex.EncodeToString(h[:])
}
// hashVisitor creates a privacy-preserving hash of visitor identity
func hashVisitor(ip, userAgent, salt string) string {
combined := ip + "|" + userAgent + "|" + salt
h := sha256.Sum256([]byte(combined))
return hex.EncodeToString(h[:])
}
// CurrentSalt returns the current salt for testing
func (u *UniquesEstimator) CurrentSalt() string {
u.mu.Lock()
defer u.mu.Unlock()
return u.currentDay
}
// DailySalt is exported for testing
func DailySalt(t time.Time) string {
return dailySalt(t)
}
// Save persists the HLL state to disk
func (u *UniquesEstimator) Save(path string) error {
u.mu.Lock()
defer u.mu.Unlock()
data, err := u.hll.MarshalBinary()
if err != nil {
return err
}
// Save both HLL data and current day salt
return os.WriteFile(path, append([]byte(u.currentDay+"\n"), data...), 0600)
}
// Load restores the HLL state from disk
func (u *UniquesEstimator) Load(path string) error {
data, err := os.ReadFile(path)
if err != nil {
return err // File not existing is OK (first run)
}
u.mu.Lock()
defer u.mu.Unlock()
// Parse saved salt and HLL data
parts := bytes.SplitN(data, []byte("\n"), 2)
if len(parts) != 2 {
return fmt.Errorf("invalid state file format")
}
savedSalt := string(parts[0])
today := dailySalt(time.Now())
// Only restore if it's the same day
if savedSalt == today {
u.currentDay = savedSalt
return u.hll.UnmarshalBinary(parts[1])
}
// Different day - start fresh
u.hll = hyperloglog.New()
u.currentDay = today
return nil
}