Crowdsec on 128MB

Installing and Using OpenWrt
1

Just a quick one...I see there is a bouncer (now called Remediation Component I believe), in the form of the package (luci-app-)crowdsec-firewall-bouncer 0.0.29-1, which can connect to a crowdsec Security Engine hosted elsewhere.

Is the crowdsec 1.6.0-1 package for someone who might want to run the Security Engine on OpenWrt? There doesn't appear to be any OpenWrt documentation for this anywhere. Not even a landing page for it.
Can anyone suggest what might be reasonable resources for running crowdsec on the router? My current device is 128MB/128MB (HH5a) which I'm guessing would struggle, but I am looking to upgrade this and would like to know what the requirements for running scrodsec might be.

Is anyone familiar with crowdsec who could comment?
Thanks.

2

It needs a lot of wear-resistant storage scratch space. Trusting upstream it is still bouncer and needs gigabyte of storage.

crowdsec-firewall-bouncer - 0.0.31-r2 - Crowdsec bouncer written in golang for firewalls.  crowdsec-firewall-bouncer will fetch new and old decisions from a CrowdSec API to add them in a blocklist used by supported firewalls.  You must install nftables.  This package contains the main program.
3

Thanks for the reply.

So even just the bouncer require gigabytes of storage?

I thought the purpose of bouncer was to offload processing to the Security Engine?

4

Well, it does not run without engine in some better place, so in principle it offloads.

1 Like