CrowdSec: yakavhurika sosi yekudyidzana cybersecurity chirongwa cheLinux

CrowdSec chirongwa chitsva chekuchengetedza yakagadzirirwa kuchengetedza maseva, masevhisi, midziyo kana chaiwo michina yakafumurwa paInternet ine server-parutivi mumiririri. Yakafuridzirwa na Fail2Ban uye inoitirwa kunge iri yekudyidzana uye yazvino vhezheni yeiyo yekudzivirira yekudzivirira fomati.

Nenzira, iye wedzinza reFail2Ban, chirongwa chakazvarwa makore gumi nematanhatu apfuura. Zvisinei, inopa nzira yemazuva ano yekubatana uye nheyo dzayo dzehunyanzvi dzekupindura mamiriro azvino.

crowdsec, yakanyorwa muGolang, ndeye yekuchengetedza otomatiki injini, iyo yakavakirwa pane zvese maitiro uye mukurumbira we IP kero.

Iyo software inoona hunhu munharaunda, inogadzirisa kutyisidzira, uye zvakare inoshanda pasi rose nenetiweki yako yevashandisi nekugovana yakawanikwa IP kero.

Izvi zvinobvumira munhu wese kuti avadzivirire. Chinangwa ndechekuvaka hombe IP mukurumbira dhatabhesi uye kuona kushandiswa kwayo pachena nevaya vanotora chikamu mukuipfumisa.

CrowdSec inoshanda sei?

Crowdsec ndeye modular uye pluggable sisitimu, inosanganisira yakakura hombe yezviitiko zvinozivikanwa zvinozivikanwa, vashandisi vanogona kusarudza izvo zviitiko zvavanoda kuzvidzivirira kubva kwavari, pamwe nekuwedzera zviri nyore tsika nyowani kuti zvienderane nharaunda yavo.

Chinangwa ndechekushandisa iyo software munzvimbo zhinji sezvinobvira.  Kuitisa kwayo nekukurumidza, kuenderana kwayo nemidziyo, iko kusununguka kwekushandisa munzvimbo dzegore pamwe nekugona kwayo kumhanya muUNIX, macOS kana Windows ecosystems: zvese izvi zvinotibvumidza kugadzirisa musika wese.

Maitiro ekuongorora injini

Ndiyo yekutanga dziviriro. Shandisa iyo YAML-yakatsanangurwa mamiriro kuenzanisa zviitiko Ivo vanopinda mudziva rinodonha uye vanodhirowa chiratidzo kana dhamu rikafashukira. Iwe unogona ipapo shandisa mhinduro yesarudzo yako nema bouncers.

Mukurumbira injini

Iyo mukurumbira injini iri yakapusa musimboti, asi zvakaoma kumisikidza. Chaizvoizvo yega yega yekumisikidzwa kweCrowdSec inogona kubatsirwa kubva kune yakasarudzika IP yakarongeka, yakagoverwa nepakati API. Kana iwe uri kushandisa LAMP, iwe haudi IP kero iyo inorwisa mamwe matekinoroji masaga senge Windows, semuenzaniso.

Iri dhatabhesi rinopihwa neese maCrowdSec zviitiko, zvine zviratidzo zvinosvinwa uye kugadziriswa pakati neAPI yedu. Manyepo ezvekunyepa uye kuyedza kwekuba nevanobira idambudziko chairo, nekudaro kudiwa kwekugadzirisa zviratidzo zvinobuda munzvimbo dzeCrowdSec.

Isu tinofunga isu tine yakanaka yakasimba nzira yekuita izvi, iyo yatinoti chibvumirano. Izvi zvinosanganisira matekinoroji akasiyana siyana, akadai sekutarisa zviratidzo kubva kunedzimwe nhengo dzinovimbwa, yedu pachedu network yezvinhu (honeypots), Canary zvinyorwa (chena runyorwa rwe IP kero), nezvimwe.

Chinangwa chedu ndechekugovera chete 100% zvinyorwa zvakavimbika. Zvakare, kuratidza kuti ndiani ane njodzi uye rinonyanya kutsamira pane yakatarwa mamiriro uye nguva yenguva. Semuenzaniso, iyo IP kero iyo yakanzi yakachena nezuro inogona kukanganiswa nhasi, uye manejimendi anogona kuichenesa zuva rinotevera. Iyo IP kero iyo SSH inotsvaga haina njodzi kune yako TSE, nezvimwe.

Display

Iyo software inosanganisira isingaremi, yemuno inoratidza system inoenderana neMetabase. CrowdSec futi inoshongedzerwa nePrometheus, kupa kutarisisa uye kugona kusvinura.

Iyo mukurumbira injini parizvino ine inopfuura 103.000 "kubvumirana" IP kero (izvo zvakapfuudza iyo chepfu uye inopesana nenhema miedzo yakanaka).

Parizvino, nhengo dzemunharaunda dzinouya kubva munyika dzinopfuura makumi mashanu dzakapararira pamakondinendi matanhatu.

Kunyange software yacho parizvino ichiita senge yakagadziriswa Fail2Ban, chinangwa ndechekushandisa simba revanhu kuti vagadzire yakanyatsoita IP mbiri dhatabhesi. Kana CrowdSec yabhowa IP chaiyo, iyo yakakonzerwa mamiriro uye timestamp inotumirwa kuAPI yedu kuti isimbiswe uye ibatanidzwe muchibvumirano chepasirese cheIPs dzakaipa.

CrowdSec ndeyemahara uye yakavhurwa sosi (pasi peMIT rezinesi), nekodhi yekodhi inowanikwa kuGitHub. Iyo parizvino inowanikwa yeLinux, ine zviteshi kune macOS uye Windows pane roadmap

mabviro: https://doc.crowdsec.net/