crowdsec-bouncer-traefik-plugin

pretecno/crowdsec-bouncer-traefik-plugin

Fork 0

mirror of https://github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin.git synced 2026-09-02 20:28:50 +02:00

Commit Graph

Select branches

Hide Pull Requests

271-feature-support-decision-scope

319-bug-traefik-logs-filling-up-with-msghandlestreamcacheupdated-after-upgrade-to-v160-alpha

368-review-fixes

feat/e2e-docker

feat/e2e-tests

fix/370-stream-lease-zero-duration

fix/renovate-oom-gitauthor

main

pointer-redis-readers

release/v1.7.1

renovate-update-version

renovate-update-version-go

renovate/all

#100

#105

#108

#11

#110

#112

#115

#116

#117

#118

#12

#121

#123

#128

#129

#13

#134

#135

#139

#14

#141

#142

#144

#145

#147

#149

#15

#153

#158

#160

#164

#166

#168

#17

#170

#175

#176

#177

#178

#189

#19

#192

#195

#2

#202

#207

#208

#210

#211

#214

#215

#217

#218

#22

#220

#223

#225

#226

#23

#230

#231

#232

#235

#236

#24

#25

#250

#259

#26

#261

#262

#265

#268

#273

#276

#277

#278

#280

#281

#285

#287

#289

#29

#290

#293

#294

#296

#300

#303

#305

#31

#310

#311

#313

#314

#317

#317

#32

#321

#324

#325

#329

#330

#331

#332

#333

#333

#334

#335

#336

#338

#34

#340

#340

#341

#342

#343

#343

#344

#345

#347

#348

#349

#35

#350

#352

#359

#360

#361

#362

#364

#365

#367

#368

#368

#369

#369

#37

#371

#372

#373

#373

#374

#374

#375

#378

#378

#379

#379

#382

#382

#383

#383

#39

#4

#45

#48

#52

#53

#54

#56

#57

#58

#59

#6

#68

#69

#70

#71

#73

#74

#76

#79

#8

#82

#84

#87

#89

#93

#97

v0.1.0-alpha

v0.1.1

v0.1.2

v0.1.3-alpha

v0.1.4-alpha

v0.1.5-alpha

v0.1.6-alpha

v1.0.0

v1.0.1

v1.0.2

v1.0.3

v1.0.4

v1.0.6

v1.0.7

v1.0.7-beta

v1.0.8

v1.0.9-beta

v1.1.0

v1.1.1

v1.1.10

v1.1.11

v1.1.11-beta

v1.1.11-beta2

v1.1.12

v1.1.13

v1.1.13-beta-fix-104

v1.1.14

v1.1.15

v1.1.16

v1.1.2

v1.1.3

v1.1.4

v1.1.5

v1.1.5-beta

v1.1.5-beta-1

v1.1.6

v1.1.7

v1.1.7-beta1

v1.1.8

v1.1.8-beta1

v1.1.8-beta2

v1.1.9

v1.2.0

v1.2.0-rc1

v1.2.0-rc2

v1.2.1

v1.2.1-rc1

v1.3.0

v1.3.0-beta1

v1.3.0-beta2

v1.3.0-beta3

v1.3.0-beta4

v1.3.1

v1.3.2

v1.3.3

v1.3.3-beta1

v1.3.4

v1.3.4-beta1

v1.3.5

v1.4.0

v1.4.1

v1.4.2

v1.4.3

v1.4.4

v1.4.5

v1.4.6

v1.4.7

v1.5.0

v1.5.0-beta1

v1.5.0-beta2

v1.5.1

v1.6.0

v1.6.0-alpha

v1.7.0

v1.7.0-alpha

v1.7.1

369d3a4052 ⬆️ renovate: Update all renovate/all Renovate Bot 2026-09-02 08:23:50 +00:00
f359d5d935 cache: keep redis readers by pointer pointer-redis-readers mhxandClaude Opus 5 2026-08-25 19:36:58 +02:00
0f8608d770 Merge remote-tracking branch 'origin' into 271-feature-support-decision-scope 271-feature-support-decision-scope maxlerebourg 2026-08-24 20:51:27 +02:00
ae7481caa5 ⬆️ renovate: Update all (#375) main maxlerebourgandRenovate Bot 2026-08-20 12:05:45 +02:00
955391671c ♻️ review fixes for #368: CIDR key correctness, lookup cost, tests (#372) mathieuHaandClaude Opus 5 2026-08-07 21:10:44 +02:00
93cd13bc10 🔥 e2e: drop the comment above wait_for_status 368-review-fixes mhxandClaude Opus 5 2026-08-07 20:14:58 +02:00
9f99c431c3 ⏪ e2e: restore the stream-mode failure check mhxandClaude Opus 5 2026-08-07 20:14:55 +02:00
9b8d6b937c 🐛 keep the stream lease alive when updateIntervalSeconds is 1 (#371) mathieuHaandmaxlerebourg 2026-08-07 19:11:54 +02:00
d57ead2ec7 ⬆️ renovate: Update actions/setup-go action to v7 (#364) maxlerebourgandRenovate Bot 2026-08-07 12:15:10 +02:00
022747488c Adjust lease duration to prevent cache update conflicts fix/370-stream-lease-zero-duration maxlerebourg 2026-08-07 12:12:59 +02:00
3f78887e3a 🐛 e2e: do not fail a scenario on a single slow response mhx 2026-07-31 19:26:47 +02:00
99673b1087 🐛 e2e: stop racing the deadline in the stream failure check mhx 2026-07-31 19:26:04 +02:00
4bac63ca83 ✅ cache: cover the CIDR operations and what a lookup costs mhx 2026-07-31 19:25:05 +02:00
0ed8154340 🐛 keep the stream lease alive when updateIntervalSeconds is 1 mhx 2026-07-31 19:21:06 +02:00
b1562ef2b9 ✅ cidr: cover the invariant the range matching rests on mhx 2026-07-31 19:23:07 +02:00
3b7168a789 🔊 cidr: log the decisions dropped for an unparsable CIDR mhx 2026-07-31 19:18:02 +02:00
adffe64319 ⚡ cidr: only probe the prefix lengths that have a decision mhx 2026-07-31 19:17:31 +02:00
1b1247823c ♻️ cidr: build keys through net.IPNet instead of hand-masking bytes mhx 2026-07-31 19:14:22 +02:00
1ba556e918 🍱 fix lint maxlerebourg 2026-07-31 14:39:09 +02:00
6b0518859d 🐛 Support range decision on stream mode maxlerebourg 2026-07-31 14:08:59 +02:00
bef5dfaadb 🔖 release v1.7.1 (#367) v1.7.1 github-actions[bot]andgithub-actions[bot] 2026-07-31 13:05:36 +02:00
2244a4d7ac 🔖 release v1.7.1 release/v1.7.1 github-actions[bot] 2026-07-31 11:04:14 +00:00
99cf9712f4 ✨ cicd: bump the version before tagging so releases report their own version (#365)
mathieuHa Claude Opus 5 maxlerebourg
2026-07-30 20:18:15 +02:00
ed4a9e8262 ⬆️ renovate: Update all (#362) maxlerebourgandRenovate Bot 2026-07-27 21:09:55 +02:00
f6ef95cf38 🐛 fix default value for CrowdsecAppsecUnreadableBodyBlock (#361) maxlerebourg 2026-07-27 08:53:32 +02:00
9daba9739c ⬆️ renovate: Update all (#350) v1.7.0 maxlerebourgandRenovate Bot 2026-07-26 17:06:02 +02:00
e98b8ed5ba ✨ Renovate update version.go (#360) maxlerebourg 2026-07-26 17:05:43 +02:00
9ea2ea2419 🍱 renovate every day renovate-update-version-go maxlerebourg 2026-07-26 14:23:05 +02:00
1dedaa0571 ✨ Renovate update version.go maxlerebourg 2026-07-26 14:10:43 +02:00
1a6d812bd4 ✨ Renovate update version.go renovate-update-version maxlerebourg 2026-07-26 14:10:43 +02:00
bb44aef718 ✨ feat: Allow cache reading from replicas (#342)
samtoxie Claude Opus 4.8 maxlerebourg mhx
2026-07-26 13:51:22 +02:00
a7915ee370 🐛 fix test maxlerebourg 2026-07-26 13:48:55 +02:00
8335f2c3e7 🍱 add tests for roundRobin maxlerebourg 2026-07-26 13:45:50 +02:00
9c8a391eff 🐛 fix test label; remove log maxlerebourg 2026-07-26 13:19:41 +02:00
6b5dc0243f 🐛 fix redis/run.sh maxlerebourg 2026-07-26 13:04:10 +02:00
947f56f265 🐛 readd redis/run.sh maxlerebourg 2026-07-26 12:56:55 +02:00
75227becca 🍱 add test for rotation maxlerebourg 2026-07-26 03:04:42 +02:00
0344e82223 🐛 fix(cache): avoid nil-pointer panic on empty redis read mhxandClaude Opus 4.8 2026-07-25 21:38:03 +02:00
73e53c7d69 📝 docs: note replicas don't fall back to primary on outage mhxandClaude Opus 4.8 2026-07-25 21:24:11 +02:00
96beb9192e ✅ test(e2e/redis): exercise read-from-replica path mhxandClaude Opus 4.8 2026-07-25 21:21:20 +02:00
8eceba35b7 📝 test(e2e/redis): fix swapped IP→verdict comments mhxandClaude Opus 4.8 2026-07-25 21:11:42 +02:00
440ad19c9d Merge remote-tracking branch 'main/main' maxlerebourg 2026-07-25 19:17:47 +02:00
e469cd5786 🍱 fix permission maxlerebourg 2026-07-25 16:40:06 +02:00
1e0dadedb2 ✨ add testing for redis with mock maxlerebourg 2026-07-25 16:30:36 +02:00
6958432a7c 🍱 fix logic maxlerebourg 2026-07-25 15:35:08 +02:00
31874263f2 🐛 Do not consider body unreadable when it's http.NoBody (#352)
Daniel Berteaud Claude Fable 5 mhx maxlerebourg
2026-07-24 20:49:43 +02:00
ad7596ff85 feat: Allow cache reading from replicas Sam Toxopeus 2026-06-22 10:17:59 +02:00
1c98c70f14 ⬆️ renovate: Update all (#349) maxlerebourgandRenovate Bot 2026-07-05 19:56:15 +02:00
be13c49144 🐛 ci(renovate): fix OOM crash and stop using Mend's default gitAuthor (#347) mathieuHaandClaude Fable 5 2026-07-05 19:36:44 +02:00
5ccc2ac498 🐛 ci(renovate): fix OOM crash and stop using Mend's default gitAuthor fix/renovate-oom-gitauthor mhxandClaude Fable 5 2026-07-05 12:14:13 +02:00
5a2998bc62 ⬆️ renovate: Update all (#345) maxlerebourgandRenovate Bot 2026-07-03 10:19:28 +02:00
26ce12f7e3 🤖 chore: adopt Renovate for automated dependency updates (#330)
mathieuHa Claude Opus 4.8 maxlerebourg
2026-07-03 09:22:14 +02:00
d32f271195 🐛 appsec: do not buffer unreadable (gRPC/HTTP2) request bodies (#332) v1.7.0-alpha
mathieuHa Claude Opus 4.8 maxlerebourg
2026-07-01 12:44:58 +02:00
1c1672c856 ✨ Consider 502, 503 and 504 as unavaible for appsec (#338) Daniel Berteaudandmaxlerebourg 2026-06-30 22:03:06 +02:00
21895fbb9d ⬆️ Bump actions/cache from 5 to 6 (#344) dependabot[bot] 2026-06-29 10:11:22 +02:00
7c73cb38dd ✨ Add parameter to configure the ban page Content-Type response header (#325) omerandmaxlerebourg 2026-06-28 22:30:48 +02:00
f4dcd933c8 🐛 fall back to system trust store when no custom TLS CA is set (#331) mathieuHaandClaude Opus 4.8 2026-06-23 09:27:32 +02:00
67b33dcf13 ⬆️ Bump actions/checkout from 6 to 7 (#341) dependabot[bot] 2026-06-22 08:56:27 +02:00
661a89ea9c ⬆️ Bump actions/upload-artifact from 4 to 7 (#336) dependabot[bot] 2026-06-15 08:49:57 +02:00
14b9c47ab2 ✨ tests: CI end-to-end suite — Traefik binary + mock LAPI (#329) mathieuHaandClaude Opus 4.8 2026-06-14 18:49:18 +02:00
f5d580578c 📝 docs: fix Mermaid diagrams not rendering (lowercase destroy keyword) (#335) mathieuHaandClaude Opus 4.8 2026-06-14 18:40:56 +02:00
8497f7de75 ✅ e2e mock: add AppSec scenario + custom remediation header assertion feat/e2e-tests mhxandClaude Opus 4.8 2026-06-06 21:33:52 +02:00
66b57496f8 ✨ tests: add local Docker end-to-end suite (Traefik + Crowdsec) feat/e2e-docker mhxandClaude Opus 4.8 2026-06-05 18:18:16 +02:00
070a82992a ⬇️ e2e mock: keep Go floor at 1.22 (yaegi ceiling) mhxandClaude Opus 4.8 2026-06-05 23:30:23 +02:00
c91ff6cc59 ⬆️ e2e mock: bump module go directive to 1.23 mhxandClaude Opus 4.8 2026-06-05 19:23:56 +02:00
f6b3983299 ⚡ e2e mock: replace fixed sleeps with condition polling mhxandClaude Opus 4.8 2026-06-05 19:07:10 +02:00
b67edfe308 🔥 e2e mock: simplify the Crowdsec LAPI mock mhxandClaude Opus 4.8 2026-06-05 18:53:58 +02:00
fcebbfe902 ♻️ tests: move local Docker e2e suite to its own PR (#333) mhxandClaude Opus 4.8 2026-06-05 18:29:23 +02:00
8580a085b9 🔧 e2e mock: address review — clarify backend flag, move ignore to root mhxandClaude Opus 4.8 2026-06-05 18:11:14 +02:00
b201143844 ✨ tests: add binary e2e suite (Traefik binary + Go mock LAPI), run it in CI mhxandClaude Opus 4.8 2026-06-05 12:48:58 +02:00
33def87c30 ♻️ tests: run e2e suite in a single sequential job mhxandClaude Opus 4.8 2026-06-04 19:14:37 +02:00
d1bdd7b423 🐛 tests: appsec scenario uses OWASP CRS inband collection mhx 2026-05-30 18:18:19 +02:00
45abab69ec 🐛 tests: set CROWDSEC_BYPASS_DB_VOLUME_CHECK for v1.7+ mhx 2026-05-30 18:13:18 +02:00
4c3bbf81fd ✨ tests: revert to docker provider + bump versions + add 6 scenarios mhx 2026-05-30 18:07:50 +02:00
900c7ebdc2 ✨ tests: end-to-end suite scaffold + stream-mode scenario mhx 2026-05-30 13:45:50 +02:00
71d845faae ✨️ Do not block middleware startup due to stream intialization (#281) maxlerebourgandmhx 2026-06-06 11:07:18 +02:00
0d8fd2a7a9 🍱 Header.Add -> Set, log Info -> Debug, version bump (#324) maxlerebourg 2026-05-05 15:51:35 +02:00
1f6a8991c8 🐛 fix appsec bypass with invalid content-length (#321) v1.6.0 maxlerebourg 2026-04-27 08:33:11 +02:00
375a5f6bb1 🔊 update log level for handle cache fonction to debug only 319-bug-traefik-logs-filling-up-with-msghandlestreamcacheupdated-after-upgrade-to-v160-alpha mhx 2026-03-15 18:01:10 +01:00
7f776fe0fe 🔊 Improve Logging: move to slog and add trace level (#276) v1.6.0-alpha Davidandmaxlerebourg 2026-03-13 18:03:12 +01:00
e54c1d5c4f Update README.md to show simplified dynamic configuration (#313) cliffjao 2026-02-21 10:45:02 -08:00
c2bbc4dac5 ✨ cicd: Automate proper version tagging in the bouncer.go that is reported to Crowdsec LAPI (#314) v1.5.1 Shadoweee77andmaxlerebourg 2026-02-19 23:41:55 +01:00
889c5b55fe ✨ Add solved-captcha as option of remediationCustomHeader (#310) v1.5.0 maxlerebourg 2026-01-23 11:36:32 +01:00
efb3a67019 🔒️ Potential fix for code scanning alert no. 8: Workflow does not contain permissions (#311) maxlerebourgandCopilot Autofix powered by AI 2026-01-22 09:44:33 +01:00
0780027252 🐛 Do not validate Crowdsec LAPI authentication credentials if bouncer is in Appsec mode (#305) v1.5.0-beta2 omer 2026-01-20 23:42:24 +01:00
892909b9b8 🐛 fix start up config error for appsec and review doc for appsec tls (#300) v1.5.0-beta1 maxlerebourgandmhx 2025-12-21 21:52:19 +01:00
c26923dee5 ⬆️ Bump actions/cache from 4 to 5 (#303) dependabot[bot] 2025-12-20 14:30:49 +01:00
a9d83f2097 ✨ Separate TLS conf for LAPI and Appsec (#293) v1.4.7 maxlerebourg 2025-12-11 07:58:12 +01:00
e20ccc5d0c ✨ Add support for injecting request header value into ban HTML template (#296) omer 2025-12-10 07:54:07 +01:00
50beb4294f ⬆️ Bump actions/checkout from 5 to 6 (#294) dependabot[bot] 2025-11-27 15:40:18 +01:00
4ab4f3f183 ✨ Transform banTemplate to add blocking reason and client IP (#290) v1.4.6 maxlerebourg 2025-11-15 10:42:14 +01:00
2aac531ea7 📝 docs: fix captcha profile reference doc link (#289) usr3 2025-10-30 18:50:02 +05:30
e8e60c958f 📝 docs: fix wicketkeeper name references (#285) Patrick Evans 2025-10-19 05:53:07 -05:00
a2d3708bc3 Do not cache decisions if DefaultDecisionSeconds=0 (#280) Davidandmaxlerebourg 2025-10-18 11:58:00 +02:00
65a2f79fb3 🐛Not write response body for HEAD requests (#277) DavidandMax Lerebourg 2025-10-06 11:19:19 +02:00
a2ecc95dc9 ⬆️ Bump actions/setup-go from 5 to 6 (#268) dependabot[bot] 2025-09-08 16:23:10 +02:00
7c4f5163e9 ✨ add custom selfhosted captcha (#259) v1.4.5
maxlerebourg David max.lerebourg mhx
2025-09-01 19:41:45 +02:00
734975c206 ⬆️ Bump github.com/maxlerebourg/simpleredis (#262) dependabot[bot] 2025-08-18 12:00:02 +02:00
7397834e58 ⬆️ Bump actions/checkout from 4 to 5 (#261) dependabot[bot] 2025-08-18 11:59:31 +02:00
84a5674b14 📈 Report traffic dropped metrics to LAPI (#223) v1.4.4 DavidandMax Lerebourg 2025-07-02 11:36:09 +02:00

1 2 3 4 5 ...