Hacker News Reader

Fail2ban becomes a serious bottleneck at significant traffic. I've replaced it with a shell script and direct pf commands that run every few minutes.

View on HN

Do you mind sharing your script? I also noticed that fail2ban currently eats ~25% of CPU and started thinking if it's even worth running at this point

https://petermolnar.net/article/asn-blocking-freebsd-pf-ngin...

It's not the most sophisticated thing.

Reply on news.ycombinator.com