93
OpnSense + Crowdsec = comfort
(lemmy.nz)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 15 Sep 2026
93 points (95.1% liked)
Selfhosted
62139 readers
530 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 3 years ago
MODERATORS
I don't believe there are any logs being transferred, just the abusive IPs are shared with the central DB.
So if an IP starts hitting a ton of rules (like .env access, repeated 403s, 404s, 429s, etc.. Or specific AppSec rules) then that IP is blocked and sent to their central DB where it's pushed out to everyone running crowdsec.
On my setup crowdsec has been more effective than cloudflare at stopping scanners and bots from overloading things, cloudflare just lets basically everything through so I stopped using it.
That said I'm curious if you remember the source of the real world tests, because I'd love to see what's actually better.
Cloudflare is in the business of keeping infrastructure up and working. Any security benefits of CF are secondary.
They do talk a lot about security and their WAF on their home page, it might be secondary but they mention it a lot.
Sure, but that WAF solution is not for us, it's aimed at clients who can measure their web presence in millions of requests per second.
Cloudflare is a CDN first and foremost, their success competing with Fastly and Akamai has been good to them, but they don't care if you get pwned unless you have a ton of money.
I guess? They advertise it as blocking bots and bad actors and such but it doesn't really do that.