Configuring Fail2ban for Traefik Reverse Proxy

• traefik

  189 48,176 9.4 Go

  The Cloud Native Application Proxy

  

I've played a bit with Traefik as reverse proxy and wanted to implement fail2ban for it, after switching from Nginx Proxy Manager. It finally works and successfully bans threat actors that conduct malicous HTTP requests. As soon as a multitude of HTTP errors are detected by fail2ban in Traefik's JSON access logs, the attacker's IP address is banned. I am using a dockerized fail2ban container and ban locally via iptables as well as optionally on Cloudflare, using Cloudflare's API. A ban notification via Telegram can also be configured.

• Fail2Ban

  49 10,553 8.8 Python

  Daemon to ban hosts that cause multiple authentication errors

  

I've played a bit with Traefik as reverse proxy and wanted to implement fail2ban for it, after switching from Nginx Proxy Manager. It finally works and successfully bans threat actors that conduct malicous HTTP requests. As soon as a multitude of HTTP errors are detected by fail2ban in Traefik's JSON access logs, the attacker's IP address is banned. I am using a dockerized fail2ban container and ban locally via iptables as well as optionally on Cloudflare, using Cloudflare's API. A ban notification via Telegram can also be configured.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• F2BFilters

  2 16 7.3 Shell

  Dockerized Fail2ban with filters and actions for various SSL proxies

Good point. Noticed it by myself during the Traefik setup. The GitHub repo contains an example log rotation script. Works flawlessly. Just put it on your server and point it to the traefik logs. https://github.com/l4rm4nd/F2BFilters/blob/main/examples/traefik/logrotate_example.txt

Suggest a related project