v1.1.11: Fix exclude_source_ips config loading and debug logging

Major fixes:
- Add exclude_source_ips to mergeConfigs() - config file values now properly loaded
- Add validation for exclude_source_ips (IP/CIDR format validation)
- Remove JA4SENTINEL_LOG_LEVEL env var from systemd service
- Config file log_level now respected without env override

Debug logging improvements:
- Log IP filter entries at startup (debug mode)
- Track filtered packet count with atomic counter
- Display filter statistics at shutdown via GetFilterStats()
- New debug logs in tlsparse component

Testing:
- Add 6 new unit tests for exclude_source_ips and log_level config loading
- Test mergeConfigs() behavior with empty/override values
- Test validation of invalid IPs and CIDR ranges

Documentation:
- Update architecture.yml with ipfilter module
- Document config loading priority and notes
- Update api.Config fields (LocalIPs, ExcludeSourceIPs, LogLevel)

Files changed:
- internal/config/loader.go (merge, validation, helpers)
- internal/config/loader_test.go (6 new tests)
- internal/tlsparse/parser.go (GetFilterStats, counter)
- cmd/ja4sentinel/main.go (debug logging)
- packaging/systemd/ja4sentinel.service (remove env var)
- architecture.yml (ipfilter module, config_loading section)

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

cmd/ja4sentinel/main.go

@@ -23,7 +23,7 @@ import (
 
 var (
 	// Version information (set via ldflags)
-	Version   = "1.1.9"
+	Version   = "1.1.11"
 	BuildTime = "unknown"
 	GitCommit = "unknown"
 )
@@ -120,12 +120,25 @@ func main() {
 	)
 	fingerprintEngine := fingerprint.NewEngine()
 
-	// Log exclusion configuration
+	// Log exclusion configuration with debug details
 	if len(appConfig.Core.ExcludeSourceIPs) > 0 {
 		appLogger.Info("main", "Source IP exclusion enabled", map[string]string{
 			"exclude_count": fmt.Sprintf("%d", len(appConfig.Core.ExcludeSourceIPs)),
 			"exclude_ips":   strings.Join(appConfig.Core.ExcludeSourceIPs, ", "),
 		})
+		appLogger.Debug("tlsparse", "IP filter configured", map[string]string{
+			"filter_entries": strings.Join(appConfig.Core.ExcludeSourceIPs, ", "),
+		})
+	} else {
+		appLogger.Debug("tlsparse", "IP filter disabled (no exclusions configured)", nil)
+	}
+
+	// Log filter stats at startup (debug mode)
+	filteredCount, hasFilter := parser.GetFilterStats()
+	if hasFilter {
+		appLogger.Debug("tlsparse", "IP filter initialized", map[string]string{
+			"filtered_packets": fmt.Sprintf("%d", filteredCount),
+		})
 	}
 	
 	// Create output builder with error callback for socket connection errors
@@ -291,6 +304,14 @@ shutdown:
 		})
 	}
 
+	// Log final filter stats
+	filteredCount, hasFilter = parser.GetFilterStats()
+	if hasFilter {
+		appLogger.Info("tlsparse", "IP filter statistics", map[string]string{
+			"total_filtered_packets": fmt.Sprintf("%d", filteredCount),
+		})
+	}
+
 	if mw, ok := outputWriter.(interface{ CloseAll() error }); ok {
 		if err := mw.CloseAll(); err != nil {
 			appLogger.Error("main", "Failed to close output writers", map[string]string{