Crowdsec: A Fail2Ban alternative written in Go

Re:Crowdsec: A Fail2Ban alternative written in Go by gingerlime on Monday October 19, 2020 @02:42PM (#24829478)

looks really interesting! thanks for sharing.

How does it fare in terms of performance compared to fail2ban? as far as I can see, fail2ban can chrun for quite a bit of cpu digesting logs. Is crowdsec faster/lighter?

another question regarding backwards compatibility... eg porting fail2ban configs, action scripts, jails etc. I guess it’s not going to be a drop in replacement, but are there any porting efforts, recipes, scripts, docs to help with the transition?

sorry for the crappy formatting, but using my mobile atm and couldn’t wait to ask :)

[ Parent | on HN ]

Re:Crowdsec: A Fail2Ban alternative written in Go by Philippe_H on Monday October 19, 2020 @03:32PM (#24829980)

Perfwise, we have a user that previously used fail2ban to block some http botnets. He crunches 7000 IPs worth of logs in 50 mins with F2B. under a minute with CrowdSec. Another block 3000 IPs doing credit card stuffing directly at payment page, very quickly as well.

[ Parent | on HN ]