Security Dashboard

The Security page provides a comprehensive view of your system's security status, including blocked IPs, security events, and protected routes.

Security Overview

The main dashboard shows key security metrics at a glance:

• Blocked IPs — Current number of blocked IP addresses
• Events Today — Security events in the last 24 hours
• Protected Routes — Number of configured protected routes
• Whitelist Entries — IPs/ranges excluded from security checks

Security Events

The Events tab shows all recorded security events. Each event includes:

• Timestamp — When the event occurred
• Event Type — Type of security event
• Source IP — Originating IP address
• Path — Requested URL path
• Deployment — Affected deployment (if applicable)
• Details — Additional event information

Event Types

Filtering Events

Use the filter bar to narrow down events:

• Date Range — Select a time period
• Event Type — Filter by specific event types
• Source IP — Search for specific IP addresses
• Deployment — Filter by deployment

Blocked IPs

The Blocked IPs tab shows all currently blocked IP addresses.

Blocking an IP

1. Click "Block IP" button
2. Enter the IP address
3. Optionally add a reason
4. Set block duration (or permanent)
5. Click "Block"

Unblocking an IP

1. Find the IP in the blocked list
2. Click the unblock icon (🔓)
3. Confirm the action

Viewing IP Details

Click on an IP address to see all security events associated with it:

• Total events count
• Event timeline
• Targeted paths
• Affected deployments

Protected Routes

Protect sensitive paths with authentication requirements.

Creating a Protected Route

1. Go to the Protected Routes tab
2. Click "Add Route"
3. Configure the route:
   • Path — URL path to protect (e.g., /admin)
   • Method — HTTP method (GET, POST, ALL)
   • Auth Type — Basic auth or Bearer token
   • Credentials — Username/password or token
   • Deployment — Limit to specific deployment (optional)
4. Click "Save"

Editing Protected Routes

Click on a route to edit its configuration or delete it.

Whitelist Management

Whitelisted IPs, CIDR ranges, or paths bypass all security checks.

Adding Whitelist Entries

1. Go to the Whitelist tab
2. Click "Add Entry"
3. Select entry type:
   • IP — Single IP address
   • CIDR — IP range (e.g., 10.0.0.0/8)
   • Path — URL path pattern
4. Enter the value
5. Add a description (optional)
6. Click "Add"

Common Whitelist Examples

• 10.0.0.0/8 — Internal network
• 192.168.1.0/24 — Local subnet
• /health — Health check endpoint
• /.well-known/* — ACME challenges

Real-time Capture

Enable real-time capture to view all incoming requests live. This is useful for debugging but should only be used temporarily.

1. Go to Settings → Real-time Capture
2. Toggle "Enable Capture"
3. Watch requests appear in real-time
4. Disable when done

Security Statistics

The Stats section provides aggregated security data:

• Events by Type — Breakdown of event categories
• Top Offending IPs — IPs with most events
• Targeted Paths — Most frequently attacked paths
• Timeline — Events over time chart

Deployment Security

Configure security settings per deployment from the deployment detail page:

1. Navigate to the deployment
2. Go to the Security tab
3. Configure deployment-specific settings:
   • Custom rate limits
   • Allowed IP ranges
   • Blocked paths

Event Cleanup

Old security events are automatically cleaned up based on retention settings. To manually trigger cleanup:

1. Go to Settings → Maintenance
2. Click "Cleanup Events"
3. Select retention period
4. Confirm

Keyboard Shortcuts