4 ms·

Not the parent commenter, but could you explain why? AT my work we're setting up a large deployment and I'm planning on configuring fail2ban on all our instance

Not the parent commenter, but could you explain why? AT my work we're setting up a large deployment and I'm planning on configuring fail2ban on all our instances. Is there any downside to doing so that I'm missing?

tptacek 9y ago
There’s no downside that I know of, but if you’re using keys there’s no upside, and if you’re not exclusively using keys there’s a huge downside to that.
- amaranth 9y ago
  The major downside of fail2ban is actually that it punishes you for using keys. If you have different keys for different machines and haven't configured your SSH client to pair them up you might attempt to login several times with the wrong key before getting in. You won't even notice this normally but fail2ban will trigger and ban you from the machine. https://github.com/fail2ban/fail2ban/issues/1263 https://github.com/fail2ban/fail2ban/issues/1263
  - wcarron 9y ago
    Huh, well never knew about this. Thanks!
  - tptacek 9y ago
    See, I didn't know this, because I would never consider setting it up on any machine I run, because what would be the point? fail2ban is rubber chicken security.