maxlerebourg / crowdsec-bouncer-traefik-plugin

Traefik plugin for Crowdsec - WAF and IP protection

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[BUG] Crowdsec Appsec Mode documentation obsolete

mathieuHa opened this issue Β· comments

Describe the bug πŸ›
Crowdsec Restart in loop when following documentation for appsec

crowdsec  | time="2024-05-01T06:07:12Z" level=fatal msg="crowdsec init: while loading acquisition config: while configuring datasource of type appsec from /etc/crowdsec/acquis.yaml (position: 1): failed to configure datasource appsec: unable to load appsec_config : no appsec-config found for crowdsecurity/virtual-patching"

Could be linked to changes made by crowdsec in the loading of collections.

From the discord:

Significant Upcoming Modifications to Container Operations :alpacas:

We've encountered issues with our container startup process recently, which has adversely affected both us and the user experience. To address this, version 1.6.1 will introduce critical changes to the startup process that need to be clearly understood.

Key changes going forward include:
All container images will now come with all parsers and scenarios pre-downloaded, though they won't be activated automatically.
Containers will NOT automatically download updates from the hub on startup unless a specific environment variable (DO_HUB_UPGRADE) is enabled. This setting should only be used if you have a limited number of containers behind your NAT/WAN, as exceeding this can trigger rate limits.
Should you encounter rate limits, the system will default to the pre-downloaded versions, preventing the container from being trapped in a continuous startup cycle.

If these modifications cause any concern, please don't hesitate to contact me directly. It's important to note that a lack of monitoring of their containers by users over the past month has led to significant AWS costs for us.

These adjustments are designed to enhance your overall experience, as most parsers/scenarios don't require frequent updates that necessitate downloading from the hub at every startup by default.

Expected behavior πŸ‘€
Exemples work by default

Context πŸ”Ž
Before posting, make sure to use the logLevel: DEBUG of the plugin and see if you can fix the error yourself.
If not, post your plugin configuration file (anonimize IP and secret key) and a partial logs file where the error is encountered.

Version (please complete the following information):

  • OS: Docker
  • Traefik version: [2.11, 3.0]
  • Plugin version: [1.3.0]

To Reproduce
Follow the exemple