Hi.
This is a feature request for the main Dashboard page.
Currently, the main Dashboard card Active Decisions appears to show only local CrowdSec security engine decisions.
In my setup, the main Dashboard shows:
Active Decisions: 6
But the bouncer metrics show that the bouncers are also enforcing CAPI/community blocklist decisions:
CAPI active decisions: about 33.55k
crowdsec security engine active decisions: 6
So, from the main Dashboard, it looks like only 6 IPs are being blocked, while in reality the bouncers are enforcing around 33.55k CAPI/community blocklist decisions plus local CrowdSec decisions.
This is not a bug in the Decisions page. The Decisions page can continue to show only local decisions.
The request is specifically about the main Dashboard page.
Possible solutions:
Add a separate card on the main Dashboard:
Community Blocklist Decisions: 33.55k
Or update the existing Active Decisions card subtitle:
Active Decisions: 6
Community Blocklist: 33.55k
Or show a combined card:
Protected IPs: 33,552
Local 6 + CAPI 33,546
Important for multi-bouncer setups:
CAPI values should not be summed across bouncers, because the same community blocklist is usually applied on each bouncer. The UI should probably use the maximum CAPI active decision count across bouncers, or display the value per bouncer.
Example:
Bouncer 1:
CAPI.active_decisions.ip = 33546
crowdsec.active_decisions.ip = 6
Bouncer 2:
CAPI.active_decisions.ip = 33544
crowdsec.active_decisions.ip = 6
Expected main Dashboard display could be:
Active Local Decisions: 6
Community Blocklist: 33,546
Total Protected IPs: 33,552
Current behavior is technically understandable, but confusing on the main Dashboard because the main overview does not show that CAPI/community blocklist protection is active and enforcing thousands of blocked IPs.
Hi.
This is a feature request for the main Dashboard page.
Currently, the main Dashboard card Active Decisions appears to show only local CrowdSec security engine decisions.
In my setup, the main Dashboard shows:
Active Decisions: 6
But the bouncer metrics show that the bouncers are also enforcing CAPI/community blocklist decisions:
CAPI active decisions: about 33.55k
crowdsec security engine active decisions: 6
So, from the main Dashboard, it looks like only 6 IPs are being blocked, while in reality the bouncers are enforcing around 33.55k CAPI/community blocklist decisions plus local CrowdSec decisions.
This is not a bug in the Decisions page. The Decisions page can continue to show only local decisions.
The request is specifically about the main Dashboard page.
Possible solutions:
Add a separate card on the main Dashboard:
Community Blocklist Decisions: 33.55k
Or update the existing Active Decisions card subtitle:
Active Decisions: 6
Community Blocklist: 33.55k
Or show a combined card:
Protected IPs: 33,552
Local 6 + CAPI 33,546
Important for multi-bouncer setups:
CAPI values should not be summed across bouncers, because the same community blocklist is usually applied on each bouncer. The UI should probably use the maximum CAPI active decision count across bouncers, or display the value per bouncer.
Example:
Bouncer 1:
CAPI.active_decisions.ip = 33546
crowdsec.active_decisions.ip = 6
Bouncer 2:
CAPI.active_decisions.ip = 33544
crowdsec.active_decisions.ip = 6
Expected main Dashboard display could be:
Active Local Decisions: 6
Community Blocklist: 33,546
Total Protected IPs: 33,552
Current behavior is technically understandable, but confusing on the main Dashboard because the main overview does not show that CAPI/community blocklist protection is active and enforcing thousands of blocked IPs.