Submitted by masterg0g0 on Sat, 04/15/2017 - 19:06 Pro Licensee
Hello,
Is it possible to do something with this here? https://github.com/buanzo/fail2ban-zmq-tools/blob/master/fail2ban-cluste... each of my server are running fail2ban individually, it would be great to consolidate them, so that there is saving of resources.. especially if my diff KVM are running on a cloudmin host..
https://github.com/buanzo/fail2ban-zmq-tools/blob/master/fail2ban-cluste...
Thanks for your comments_ Rohit
Status:
Active
Comments
Submitted by JackB on Sun, 04/16/2017 - 01:31 Comment #1
You can do something similar with a dedicated router box (or VM thought this is less secure) and multiple VNETs.
I use a separate machine running pfsense to do most of this.
Regards
Submitted by masterg0g0 on Sun, 04/16/2017 - 01:34 Pro Licensee Comment #2
That is something which i cannot implement presently, the landscape is complicated to achieve that at the moment. moreover everyone does not have their own cloudminor or hypervizor instance.
Submitted by JamieCameron on Sun, 04/16/2017 - 11:51 Comment #3
Are you just looking for a way to distribute fail2ban configs to multiple systems?
If so, Webmin's Cluster Copy Files module can do this.
Submitted by masterg0g0 on Mon, 04/17/2017 - 05:59 Pro Licensee Comment #4
Hi Jamie,
Actually not, but i was refering to this inter-connecting of fail2ban https://github.com/buanzo/fail2ban-zmq-tools/blob/master/fail2ban-cluste... , or are you saying that once we have a fail2ban setup in one server. replicate the database to other clusters and on those clusters.. let fail2ban read from the database? even a central Db?
Submitted by JamieCameron on Mon, 04/17/2017 - 20:31 Comment #5
Oh, I didn't know about that feature. Is it part of the new client / server fail2ban architecture?
Submitted by masterg0g0 on Wed, 04/19/2017 - 01:39 Pro Licensee Comment #6
No, its a open source third party development..
Submitted by JamieCameron on Wed, 04/19/2017 - 19:36 Comment #7
Ok. In practice, it's unlikely we will support this in the fail2ban module in the near future.