2 ms·
Fail2ban becomes a serious bottleneck at significant traffic. I've replaced it with a shell script and direct pf commands that run every few minutes.
by pmlnr 1mo ago
Fail2ban becomes a serious bottleneck at significant traffic. I've replaced it with a shell script and direct pf commands that run every few minutes.
- virgoerns 1mo agoDo you mind sharing your script? I also noticed that fail2ban currently eats ~25% of CPU and started thinking if it's even worth running at this point
- pmlnr 1mo agohttps://petermolnar.net/article/asn-blocking-freebsd-pf-nginx/index.html https://petermolnar.net/article/asn-blocking-freebsd-pf-ngin... It's not the most sophisticated thing.