search

docker-flow / docker-flow-proxy

Docker Flow Proxy
https://docker-flow.github.io/docker-flow-proxy/
MIT License
317 stars 189 forks source link

Feature - Intrusion Detection #94

Closed sstubbs closed 2 years ago

sstubbs commented 5 years ago

Hi,

I assume this is not in the scope of this project but I am struggling to come up with a viable intrusion detection setup with docker swarm. This project is great and I am currently using it for http. I am thinking to also start using it for TCP.

Is there some way of banning connections from an ip addresses and if not is there a setup that you might know of to deal with this? Currently I am just running the containers that need it on not in swarm mode with fail2ban and --cap-add=NET_ADMIN but it just seems a bit awkward and I would much rather have one container dealing with this for all containers whether it's the proxy or a container in front or behind it.

sstubbs commented 5 years ago

I see there is another feature request https://github.com/docker-flow/docker-flow-proxy/issues/84 which might be able to work with this somehow.

vfarcic commented 5 years ago

This project needs adoption. I moved to Kubernetes and cannot dedicate time to this project anymore. Similarly, involvement from other contributors dropped as well. Please consider contributing yourself if you think this project is useful.

lle0x commented 2 years ago

Dear @sstubbs

If this issue is still relevant, please feel free to leave a comment here.

lle0x commented 2 years ago

Closed due to inactivity