Built-in automatic blocklist
vholer opened this issue · 3 comments
vholer commented
It would be nice if it's possible to configure sshpiper to apply some IP-based restrictions on clients after a number of failed attempts. Similar functionality is usually provided by tools like fail2ban / denyhosts, but in Kubernetes envs. it's not that easy to use these.
Possible options:
- max. number of failed attempts,
- timeframe,
- ban time,
- always allowed / blocked ranges
Successful login resets the counter. Persistence of state across restarts is not IMHO importatnt.
tg123 commented
maybe bake fail2ban into image?