https://github.com/crowdsecurity/cs-cloudflare-worker-bouncer

A CrowdSec Bouncer that syncs the decisions made by CrowdSec with CloudFlare's firewall using cloudflare workers. Manages multi user, multi account, multi zone setup. Supports IP, Country and AS scoped decisions.
https://github.com/crowdsecurity/cs-cloudflare-worker-bouncer

Last synced: 2 months ago
JSON representation

A CrowdSec Bouncer that syncs the decisions made by CrowdSec with CloudFlare's firewall using cloudflare workers. Manages multi user, multi account, multi zone setup. Supports IP, Country and AS scoped decisions.

• Host: GitHub
• URL: https://github.com/crowdsecurity/cs-cloudflare-worker-bouncer
• Owner: crowdsecurity
• License: mit
• Created: 2023-07-25T12:57:14.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2025-04-04T08:54:21.000Z (about 1 year ago)
• Last Synced: 2025-04-04T09:33:23.049Z (about 1 year ago)
• Language: Go
• Homepage: https://doc.crowdsec.net/docs/next/bouncers/cloudflare-workers
• Size: 467 KB
• Stars: 7
• Watchers: 10
• Forks: 6
• Open Issues: 6
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-crowdsec - cs-cloudflare-worker-bouncer - Edge-based bouncer using Cloudflare Workers for multi-zone setups. (Bouncers / Cloud & CDN)

README

          
















💠 Hub

💬 Discourse 



⚠️ Due to the heavy usage of KV and Workers quotas on Cloudflare free plan, the paid Cloudflare Worker Plan is recommended for this remediation component.

⚠️ Follow this guide to [test on free Plan](https://doc.crowdsec.net/u/bouncers/cloudflare-workers/#appendix-test-with-cloudflare-free-plan)

⚠️ Make sure to properly set up [The worker route fail mode](https://doc.crowdsec.net/u/bouncers/cloudflare-workers#setting-up-the-worker-route-fail-mode)

# CrowdSec Cloudflare Worker 

A remediation component for Cloudflare.

## How does it work

This remediation component deploys Cloudflare Worker in front of a Cloudflare Zone/Website, which checks if incoming IP addresses are present in a KV store and takes necessary remedial actions. It also periodically updates the KV store with CrowdSec LAPI's decisions.

# Documentation

Please follow the [official documentation](https://docs.crowdsec.net/docs/next/bouncers/cloudflare-workers).