Observability
Grafana cross-dashboard variables: share variables across dashboards
Create your Grafana variables once and reuse them everywhere: global or folder scope, enabling, attaching, name conflicts, permissions and API, tested on …
Guides & insights
A library for curious minds
Observability
CrowdSec: understanding the collaborative firewall
What CrowdSec is, how it detects and blocks attacks: Security Engine, parsers, scenarios, Local API, Central API and bouncers.
Observability
CrowdSec or Fail2ban: what are the differences?
Comparing CrowdSec and Fail2ban: detection, blocking, sharing, performance, multi-server, and how to migrate safely.
Observability
Installing and configuring CrowdSec: packages, Docker, acquisition
Install CrowdSec with packages or Docker, understand its files, declare the logs to read, enroll the console and deploy several servers.
Observability
CrowdSec collections, parsers and scenarios
The Hub, collections, the parser pipeline and scenarios: install, understand with cscli explain, write your own scenario and test it in simulation.
Observability
CrowdSec bouncers: principles and firewall bouncer
Understanding CrowdSec bouncers: where to block, live and stream modes, API keys, decisions API, and setting up the nftables or iptables firewall bouncer.
Observability
Protecting Traefik with CrowdSec: the bouncer plugin
Setting up the CrowdSec bouncer in Traefik: plugin, middleware, stream and live modes, real IP behind a CDN, access logs and AppSec WAF.
Observability
CrowdSec bouncers for Nginx, Apache and HAProxy
Setting up CrowdSec bouncers for Nginx, OpenResty, Apache and HAProxy SPOA: configuration, block page, captcha and AppSec.
Observability
CrowdSec bouncers: Cloudflare, network devices, Kubernetes and custom bouncer
Block at the CDN with Cloudflare Workers, feed pfSense or MikroTik with Blocklist Mirror, protect Kubernetes and CMSs, and write your own bouncer.
Observability
Decisions, profiles, allowlists and AppSec in CrowdSec
Manage decisions with cscli, adapt block duration and type with profiles, avoid false positives with allowlists and enable the AppSec WAF.
Observability
CrowdSec observability: banned IPs, blocked attacks, Prometheus and Grafana
Monitoring CrowdSec: cscli metrics, banned IPs, detected attacks, volume blocked by bouncers, Prometheus metrics, Grafana, alerts and notifications.
Observability
CrowdSec in production: best practices
Good habits for running CrowdSec in production: LAPI, keys, false positives, database, upgrades and backups.
Learning never stops