Bot detection with CrowdSec WAF This release brings a major change to the CrowdSec WAF: a bot detection feature. If enabled, clients will be served a challenge + fingerprinting page before accessing the website. CrowdSec will evaluate the challenge and check the fingerprint against pre-configured rules to decide whether the client looks legitimate or not. You can find more information about this n…
New Features WAF: OpenAPI schema validation (#4097) @blotus Improvements WAF: enforce body size limitation (#4355) @blotus Decision stream: move to chunked transfer by default (#4413) @blotus cscli: add --quick flag to enroll command (#4350) @blotus propose an alternative, cleaner configuration for appsec-config (#4397) @buixor Bug Fixes cscli metrics: don't attempt to create a DB client if there'…
New Features WAF: OpenAPI schema validation (#4097) @blotus Improvements WAF: enforce body size limitation (#4355) @blotus Decision stream: move to chunked transfer by default (#4413) @blotus cscli: add --quick flag to enroll command (#4350) @blotus propose an alternative, cleaner configuration for appsec-config (#4397) @buixor Bug Fixes cscli metrics: don't attempt to create a DB client if there'…
CrowdSec 1.7.7 brings 2 major changes: On linux, RE2 is now used by default for evaluating regexp in parsers WAF rules can now contain a mix of AND/OR conditions without any limits, giving much greater flexibility when writing new rules RE2 by default on linux CrowdsSec has supported for a long time using RE2 as the regexp engine, and with this release we make it the default. CrowdSec has always u…
New Features add LookupFile and FileMap expr helpers (#4372) @buixor waf rules: allow arbitrary mix of AND and OR conditions (#4358) @blotus Improvements enable RE2 support by default on linux (#4386) @blotus cscli allowlists: add import command (#4378) @blotus WAF: expose more transformations from coraza (#4140) @blotus Add new kind alert attribute (#4351) @blotus Use environment proxy settings f…
Changes Bug Fixes cmd/crowdsec: assign overflow after parsing (#4225) @mmetc Geolite2 notice This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com. Installation Take a look at the installation instructions.
Changes replace syscall with unix/windows packages where possible (#3032) @mmetc pkg/acquisition: refact configuration validation and tests (#4187) @mmetc pkg/acquisition: remove/restore mock datasources after usage (#4190) @mmetc pkg/leakybucket: replace global variables with injected StateDumper (#4197) @mmetc pkg/acquisition: method docs, deduplicate module names (#4192) @mmetc errors.Wrapf ->…
Changes replace syscall with unix/windows packages where possible (#3032) @mmetc pkg/acquisition: refact configuration validation and tests (#4187) @mmetc pkg/acquisition: remove/restore mock datasources after usage (#4190) @mmetc pkg/leakybucket: replace global variables with injected StateDumper (#4197) @mmetc pkg/acquisition: method docs, deduplicate module names (#4192) @mmetc errors.Wrapf ->…
Changes docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc refact cscli: define csconfig.Getter once (#4091) @mmetc refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc refact pkg/database batching (#3906) @mmetc refact pkg/acquisition: split appsec.go (#4043) @mmetc refact pkg/acquisition: journalctl…
Changes docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc refact cscli: define csconfig.Getter once (#4091) @mmetc refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc refact pkg/database batching (#3906) @mmetc refact pkg/acquisition: split appsec.go (#4043) @mmetc refact pkg/acquisition: journalctl…
Changes docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc refact cscli: define csconfig.Getter once (#4091) @mmetc refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc pkg/csplugin: use backoff package to retry notifications (#3944) @mmetc refact pkg/database batching (#3906) @mmetc refact pkg/acquisition: split appsec.go (#4043) @mmetc refact pkg/acquisition: journalctl…