Custom Remediation

[roedie]

Hi,

With the current LUA plugin it is possible to use custom remediation names. I use this to pass some hints to HAProxy.

Now I'm trying to do this in the X-Crowdsec-Remediation header but that always shows unknown. Would it be possible to modify this to contain the custom remediation?

Ot are there other ways to get hold of the custom remediation name somehow?

Regards

[github-actions]

@roedie: Thanks for opening an issue, it is currently awaiting triage.

In the meantime, you can:

1. Check Documentation to see if your issue can be self resolved.
2. You can also join our Discord

Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[github-actions]

@roedie: There are no 'kind' label on this issue. You need a 'kind' label to start the triage process.

• /kind feature
• /kind enhancement
• /kind bug
• /kind packaging

Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[roedie]

/kind enhancement

[LaurenceJJones]

Hey!

Yeah so at the moment the remediation are held in weighted format EG:

cs-haproxy-spoa-bouncer/internal/remediation/root.go

Lines 1 to 9 in 489bc83

	package remediation
	// The order matters since we use slices.Max to get the max value
	const (
	Allow Remediation = iota // Allow remediation
	Unknown // Unknown remediation (Unknown is used to have a value for remediation we don't support EG "MFA")
	Captcha // Captcha remediation
	Ban // Ban remediation
	)

this means we can get the "most severe" remediation by doing if newRemediation > remediation ; then remediation = newRemedation in short :D

So technically we could switch to strings then either configure a weight via config.yaml plus provide a default EG: what we already have and unknown can just be aliased weight for anything not specified in the weighting

edit: if you could provide some examples or what you mean by "hints" it could aid me in the design or providing custom remediation exposed to haproxy.