refactor: enhance bird metrics polling with context support

Updated the `startBirdMetricsPoller` function to accept a context parameter, allowing for better control over the polling lifecycle. This change was applied in both `evobgp-all` and `evobgp-api` main files. Additionally, modified the `StartBirdProtocolsPoller` function to handle context cancellation, ensuring graceful shutdown of the polling routine. Introduced a new service in the Docker Compose configuration for logging runtime service outputs, improving observability during deployment.

internal/pipeline/parse.go

@@ -3,10 +3,17 @@ package pipeline
 import (
 	"bufio"
 	"encoding/json"
+	"fmt"
 	"net/netip"
 	"strings"
 )
 
+// Защита от pathological JSON: глубокая рекурсия при обходе и взрыв числа узлов по пути.
+const (
+	maxJSONWalkDepth   = 512
+	maxJSONPathBreadth = 50000
+)
+
 // ParseCIDRLines extracts unique IPv4/IPv6 CIDRs from plain text (one per line, # comments, empty lines skipped).
 func ParseCIDRLines(body string) []netip.Prefix {
 	seen := make(map[string]struct{})
@@ -47,7 +54,10 @@ func parseCIDRsFromJSON(body, prefixPath string) ([]netip.Prefix, error) {
 	if err := json.Unmarshal([]byte(body), &root); err != nil {
 		return nil, err
 	}
-	values := jsonValuesAtPath(root, prefixPath)
+	values, err := jsonValuesAtPath(root, prefixPath)
+	if err != nil {
+		return nil, err
+	}
 	seen := make(map[string]struct{})
 	var out []netip.Prefix
 	for _, raw := range values {
@@ -66,10 +76,10 @@ func parseCIDRsFromJSON(body, prefixPath string) ([]netip.Prefix, error) {
 	return out, nil
 }
 
-func jsonValuesAtPath(root any, prefixPath string) []string {
+func jsonValuesAtPath(root any, prefixPath string) ([]string, error) {
 	path := strings.TrimSpace(prefixPath)
 	if path == "" {
-		return flattenJSONStrings(root)
+		return flattenJSONStrings(root, 0)
 	}
 	parts := strings.Split(path, ".")
 	nodes := []any{root}
@@ -98,36 +108,54 @@ func jsonValuesAtPath(root any, prefixPath string) []string {
 			}
 			next = append(next, child)
 		}
+		if len(next) > maxJSONPathBreadth {
+			return nil, fmt.Errorf("json path: слишком много узлов на шаге (>%d)", maxJSONPathBreadth)
+		}
 		nodes = next
 		if len(nodes) == 0 {
-			return nil
+			return nil, nil
 		}
 	}
 	var out []string
 	for _, n := range nodes {
-		out = append(out, flattenJSONStrings(n)...)
+		part, err := flattenJSONStrings(n, 0)
+		if err != nil {
+			return nil, err
+		}
+		out = append(out, part...)
 	}
-	return out
+	return out, nil
 }
 
-func flattenJSONStrings(v any) []string {
+func flattenJSONStrings(v any, depth int) ([]string, error) {
+	if depth > maxJSONWalkDepth {
+		return nil, fmt.Errorf("json: глубина вложенности превышает %d", maxJSONWalkDepth)
+	}
 	switch x := v.(type) {
 	case string:
-		return []string{strings.TrimSpace(x)}
+		return []string{strings.TrimSpace(x)}, nil
 	case []any:
 		var out []string
 		for _, item := range x {
-			out = append(out, flattenJSONStrings(item)...)
+			part, err := flattenJSONStrings(item, depth+1)
+			if err != nil {
+				return nil, err
+			}
+			out = append(out, part...)
 		}
-		return out
+		return out, nil
 	case map[string]any:
 		var out []string
 		for _, item := range x {
-			out = append(out, flattenJSONStrings(item)...)
+			part, err := flattenJSONStrings(item, depth+1)
+			if err != nil {
+				return nil, err
+			}
+			out = append(out, part...)
 		}
-		return out
+		return out, nil
 	default:
-		return nil
+		return nil, nil
 	}
 }