You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: crowdsec-docs/docs/configuration/network_management.md
+7-4Lines changed: 7 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,13 +16,17 @@ id: network_management
16
16
- Local API connects to `tcp/443` on `blocklists.api.crowdsec.net` (blocklists pull)
17
17
- Local API connects to `tcp/443` on `papi.api.crowdsec.net` (console management)
18
18
-`cscli` connects to `tcp/443` on `cdn-hub.crowdsec.net` to fetch scenarios, parsers etc. (1)
19
-
-`cscli` connects to `tcp/443` on `version.crowdsec.net` to check latest version available.
20
-
-`cscli` connects to `tcp/443` on `hub-data.crowdsec.net` to fetch external data loaded by parsers, scenario and postoverflows.
19
+
-`cscli` connects to `tcp/443` on `version.crowdsec.net` to check latest version available. (2)
20
+
-`cscli` connects to `tcp/443` on `hub-data.crowdsec.net` to fetch external data loaded by parsers, scenario and postoverflows. (2)
21
21
- Dashboard-related functionality may connect to external services for configuration
22
22
- Installation script is hosted on `install.crowdsec.net` over HTTPS.
23
23
- Repositories are hosted on `packagecloud.io` over HTTPS.
24
24
25
-
__(1) - FQDN is cloudfront entry to crowdsec's github repository so people avoid hitting github's quotas__
25
+
__(1) - This FQDN routes traffic to CrowdSec's GitHub repositories through CloudFront, which helps avoid GitHub rate limits.__
26
+
[AWS publishes the CloudFront IP ranges](https://ip-ranges.amazonaws.com/ip-ranges.json); CloudFront entries are tagged `CLOUDFRONT`.
27
+
28
+
__(2) - This FQDN routes traffic to CrowdSec's GitHub repository through Cloudflare, which helps avoid GitHub rate limits.__
29
+
[Cloudflare publishes its IP ranges](https://www.cloudflare.com/ips/): [IPv4](https://cloudflare.com/ips-v4) and [IPv6](https://cloudflare.com/ips-v6).
26
30
27
31
28
32
# Communication between components
@@ -55,4 +59,3 @@ Both components need proper configuration to run (we decide to keep this behavio
55
59
## Notes on proxy use
56
60
57
61
- It's possible to use crowdsec through proxy, it will honor the `HTTP_PROXY` environment variable. More on the configuration how to use crowdsec through a proxy [here](/u/troubleshooting/security_engine#how-to-set-up-a-proxy)
Copy file name to clipboardExpand all lines: crowdsec-docs/versioned_docs/version-v1.6/configuration/network_management.md
+8-6Lines changed: 8 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,13 +16,18 @@ id: network_management
16
16
- Local API connects to `tcp/443` on `blocklists.api.crowdsec.net` (blocklists pull)
17
17
- Local API connects to `tcp/443` on `papi.api.crowdsec.net` (console management)
18
18
-`cscli` connects to `tcp/443` on `cdn-hub.crowdsec.net` to fetch scenarios, parsers etc. (1)
19
-
-`cscli` connects to `tcp/443` on `version.crowdsec.net` to check latest version available.
20
-
-`cscli` connects to `tcp/443` on `hub-data.crowdsec.net` to fetch external data loaded by parsers, scenario and postoverflows.
19
+
-`cscli` connects to `tcp/443` on `version.crowdsec.net` to check latest version available. (2)
20
+
-`cscli` connects to `tcp/443` on `hub-data.crowdsec.net` to fetch external data loaded by parsers, scenario and postoverflows. (2)
21
21
-[`cscli dashboard`](/cscli/cscli_dashboard.md) fetches metabase configuration from a s3 bucket (`https://crowdsec-statics-assets.s3-eu-west-1.amazonaws.com/`)
22
22
- Installation script is hosted on `install.crowdsec.net` over HTTPS.
23
23
- Repositories are hosted on `packagecloud.io` over HTTPS.
24
24
25
-
__(1) - FQDN is cloudfront entry to crowdsec's github repositories so people avoid hitting github's quotas__
25
+
__(1) - This FQDN routes traffic to CrowdSec's GitHub repositories through CloudFront, which helps avoid GitHub rate limits.__
26
+
[AWS publishes the CloudFront IP ranges](https://ip-ranges.amazonaws.com/ip-ranges.json); CloudFront entries are tagged `CLOUDFRONT`.
27
+
28
+
__(2) - This FQDN routes traffic to CrowdSec's GitHub repository through Cloudflare, which helps avoid GitHub rate limits.__
29
+
[Cloudflare publishes its IP ranges](https://www.cloudflare.com/ips/): [IPv4](https://cloudflare.com/ips-v4) and [IPv6](https://cloudflare.com/ips-v6).
30
+
26
31
27
32
28
33
# Communication between components
@@ -51,6 +56,3 @@ Both components need proper configuration to run (we decide to keep this behavio
51
56
## Prometheus -> Agents
52
57
53
58
- If you're scrapping prometheus metrics from your agents or your local API, you need to allow inbound connections to `tcp/6060`
Copy file name to clipboardExpand all lines: crowdsec-docs/versioned_docs/version-v1.7/configuration/network_management.md
+7-6Lines changed: 7 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,13 +16,17 @@ id: network_management
16
16
- Local API connects to `tcp/443` on `blocklists.api.crowdsec.net` (blocklists pull)
17
17
- Local API connects to `tcp/443` on `papi.api.crowdsec.net` (console management)
18
18
-`cscli` connects to `tcp/443` on `cdn-hub.crowdsec.net` to fetch scenarios, parsers etc. (1)
19
-
-`cscli` connects to `tcp/443` on `version.crowdsec.net` to check latest version available.
20
-
-`cscli` connects to `tcp/443` on `hub-data.crowdsec.net` to fetch external data loaded by parsers, scenario and postoverflows.
19
+
-`cscli` connects to `tcp/443` on `version.crowdsec.net` to check latest version available. (2)
20
+
-`cscli` connects to `tcp/443` on `hub-data.crowdsec.net` to fetch external data loaded by parsers, scenario and postoverflows. (2)
21
21
- Dashboard-related functionality may connect to external services for configuration
22
22
- Installation script is hosted on `install.crowdsec.net` over HTTPS.
23
23
- Repositories are hosted on `packagecloud.io` over HTTPS.
24
24
25
-
__(1) - The FQDN is cloudfront entry to crowdsec's github repositories so people avoid hitting github's quotas__
25
+
__(1) - This FQDN routes traffic to CrowdSec's GitHub repositories through CloudFront, which helps avoid GitHub rate limits.__
26
+
[AWS publishes the CloudFront IP ranges](https://ip-ranges.amazonaws.com/ip-ranges.json); CloudFront entries are tagged `CLOUDFRONT`.
27
+
28
+
__(2) - This FQDN routes traffic to CrowdSec's GitHub repository through Cloudflare, which helps avoid GitHub rate limits.__
29
+
[Cloudflare publishes its IP ranges](https://www.cloudflare.com/ips/): [IPv4](https://cloudflare.com/ips-v4) and [IPv6](https://cloudflare.com/ips-v6).
26
30
27
31
28
32
# Communication between components
@@ -51,6 +55,3 @@ Both components need proper configuration to run (we decide to keep this behavio
51
55
## Prometheus -> Agents
52
56
53
57
- If you're scrapping prometheus metrics from your agents or your local API, you need to allow inbound connections to `tcp/6060`
0 commit comments