Can I vibe code Cloudflare?

Build a lightweight reverse proxy and WAF sidecar in Go designed to sit in front of an e-commerce origin server.

The application must include:
1. DNS & Reverse Proxy: HTTPS reverse proxy using certmagic for automated ACME TLS certificate issuance via Let's Encrypt. Proxy incoming traffic to a configured HTTP origin backend with keep-alive connection pooling.
2. Caching Engine: In-memory static asset cache (images, CSS, JS) based on Cache-Control header parsing. Respect max-age, no-cache, and private directives. Include an explicit cache purge HTTP endpoint authenticated via bearer token.
3. WAF Engine: Integrate an embedded WAF engine using regex pattern matching for SQL Injection (SQLi), Cross-Site Scripting (XSS), and Path Traversal attack vectors in request path, query parameters, and payload body. Return a HTTP 403 response with a custom JSON error when a malicious signature is matched.
4. Rate Limiting: Token bucket rate limiter per client IP address implemented via a thread-safe sync.Map or Redis-backed state store, returning HTTP 429 when thresholds are exceeded.
5. Observability: Structured JSON access logging containing client_ip, request_time, path, status, upstream_latency, cache_hit_status, and blocked_by_waf boolean.

Explicitly Out of Scope:
- BGP Anycast routing or distributed global DNS resolution.
- Volumetric Layer 3/4 SYN flood or UDP amplification DDoS mitigation.
- Edge compute runtimes (V8/Wasm isolates).
- Any custom hardware-level network driver manipulation.

Architecture: Implement as a single Go binary that loads host rules and origin mappings from a YAML configuration file. Ensure thread-safety across high concurrent request loads using non-blocking I/O routines.

$ each button prefixes agent-specific run instructions · build your own product, never copy proprietary code, trademarks or designs