How to verify Traefik + CrowdSec installation ?
reddit / selfhosted

----------------------------------------------------------------------
Azsde · 2023-10-25 16:14

Hello everyone,

I have spent the past few days trying to set up traefik + crowdsec,
manually banning an IP works, but I am not sure the external IPs
blocking is working.

As epexcted, I cannot access my services from a manually banned IP,
but I would like to check the behavior of "known" malicious IP
addresses.

Is there a way to do that ?

Also, I have zero alert in my crowdsec console, it has been a few
hours, is it normal ?

I thank you in advance for your help.

----------------------------------------------------------------------
clintkev251 · 2023-10-25 17:15

Crowdsec has a Prometheus endpoint built in, so you can scrape metrics
from it. So I have a dashboard which shows that info and you can see
in realtime decisions, buckets, etc. You can also set up notifications
(I use slack) so that you get an alert any time an IP is banned.
`cscli` also has some features for simulation, so you can provide it
with a log sample that includes requests which should be considered
malicious and you can see exactly how it will handle it.