posts/haproxy-crowdsec/

[giscus[bot]]

posts/haproxy-crowdsec/

With the recent release of the official HAProxy bouncer for Crowdsec I thought I would give it a go. In doing this I found out that CrowdSec bouncer was detecting the IP using source IP, which required the use of CF-Connecting-IP to be set as the source IP. I was having issues because I have a loop in my HAProxy configuration that meant it was grabbing 127.0.0.1 as the client IP. I have resolved all of these issues and it is now working perfectly.

https://ciphermenial.github.io/posts/haproxy-crowdsec/

[voklav]

really appreciate your content!
I've been researching reverse proxies for a while now and it seems your setup is pretty similar to mine and for what I want.
As far as I understand CrowdSec and HAProxy are on the same vm / lxc ?

[ciphermenial]

Yeah, you install crowdsec locally on what you are protecting. I have installed on a bunch of my containers for different services e.g. firewall.