Self-Hosted NetBird Meets CrowdSec: Blocking Bots via Community Blocklists
philipvollet · x · 2026-11-05
A fresh server gets bots hammering /.env and brute-forcing SSH within minutes. NetBird published a guide on protecting self-hosted deployments with CrowdSec AppSec, a web app firewall inspecting every HTTP request, in front of the NetBird dashboard — including testing, monitoring, lockout recovery, and optional Console enrollment.
How CrowdSec works: the engine detects malicious behavior, decides on the source IP, and shares decisions across the community into a continuously updated blocklist. Bouncers query the engine and enforce blocks locally via an in-memory cache with no third-party round trip. NetBird Proxy adds CIDR allowlists, country blocking, and per-service CrowdSec in observe or enforce mode.
More from Infra
- Splitting one 27B across two 3090s was slow: one model per GPU hits 243 tok/s combined — StewartalsopIII · 2026-11-06
- Shawn Hymel's new tutorial: using Meshtastic devices as IoT sensor nodes with Python — ShawnHymel · 2026-11-06
- UBS: Aspeed Has Secured 2027 BMC Orders on Strong Agentic AI Server Demand — BenBajarin · 2026-11-06
- Firecracker VM escape disclosed: researchers claim root execution on the host — moyix · 2026-11-06
- Mercedes partners with Liquid AI to run models on-device in cars, not the cloud — JosephJacks_ · 2026-11-06
- Liquid AI's LFM3 hailed as the iPhone moment for local AI on consumer hardware — JosephJacks_ · 2026-11-06