Andi Sugandi - Securing Microservice Architectures with Traefik and CrowdSec on openSUSE Server

Modern containerized applications running on container orchestration rely heavily on stable, intelligent reverse proxies like Traefik to orchestrate traffic, but exposed service endpoints face relentless automated probing from global adversaries, necessitating a defense-in-depth approach that pairs reverse proxy routing with CrowdSec’s behavioral threat intelligence at the cluster edge. However, implementing a multi-tenant security architecture under high-intensity orchestration can trigger severe configuration volatility, where minor dynamic YAML syntax mismatches can crash cluster-wide protection tools, and over-aggressive security rules risk blocking critical, legitimate communication hooks between internal endpoints. This talk covers the practical journey of deploying, tuning, and troubleshooting this edge security stack natively on openSUSE Server within a production Docker Swarm cluster.