Light

crowdsecurity / cs-magento-bouncer Goto Github PK

CrowdSec is an open-source cyber security tool. This module blocks detected attackers or display them a captcha to check they are not bots.

License: MIT License

PHP 64.30% HTML 6.77% CSS 0.24% Shell 1.82% JavaScript 26.88%

crowdsec crowdsec-bouncer magento2 php

cs-magento-bouncer's Introduction

CrowdSec Bouncer extension for Magento 2

This Magento 2 module allows you to apply decisions from CrowdSec directly within the Magento 2 application.

Usage

See User Guide

Installation

See Installation Guide

Technical notes

See Technical notes

Developer guide

See Developer guide

License

MIT

cs-magento-bouncer's People

Contributors

Stargazers

Watchers

Forkers

julienloizelet be-secure onlinebizsoft-magento2

cs-magento-bouncer's Issues

[BUG] Dangerous default timeout

Describe the bug
A clear and concise description of what the bug is.

Preconditions

Magento 2 version: 2.4.6-p3
CrowdSec_Bouncer module version: latest
Environment (Developer or Production mode): production

To Reproduce
Steps to reproduce the behavior:

Simulate a crash from the crowdesc API server (just shut it down)

Expected result
A clear and concise description of what you expected to happen.

No impact for visitors. No more bouncing.

Actual result
A clear and concise description of the actual result.

Site almost down, since every request is waiting the 120seconds timeout used by this module.

[BUG] Cache storage issue

Describe the bug
A clear and concise description of what the bug is.

Preconditions

Magento 2 version: 2.4.6-p3
CrowdSec_Bouncer module version: 2.0.0

To Reproduce
Steps to reproduce the behavior:

Go to module's configuration, cache config section

Expected result
A clear and concise description of what you expected to happen.

Be able to configure redis with native M2 redis classes.
Be able to use filesystem on multi-nodes infrastructure

Actual result
A clear and concise description of the actual result.

We're forced to install phpredis to use redis
On filesystem mode, files are stored locally, only on the pod running the cron. So others pod don't have any decisions. Would have been better to store this in a remote storage like import_export for example.

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.