hi guys and welcome back to another ibra corp video thanks for coming back and checking out
the channel today it's an absolute pleasure to have you guys here today i want to show you guys
plugins for traffic and why you need them and the best ones to pick we'll give you the top
five plugins that you should be using to help you get the best out of your traffic setup
of course depending on your environment as well as the pilot program of traffic is deprecated plugins
are now independently used and much easier to configure to have them ready to go for your
setup they can provide a lot of functionality and a lot of different options those who want to
help customize and grow their traffic instance so without further ado let's just get stuck into it
so guys here we are on the plugin catalog for traffic and as you can see there is a
large list of plugins that we can use and they'll offer various different things to
our traffic setup so i'm going to pick one of the top five that we are suggesting today
and then i'm going to show you how to install that in traffic and then we'll basically just show you
all the other plugins that you should go for as well now definitely one of the most important that
we'd recommend is the traffic reel ip plugin now this is really beneficial especially when you're
using something like cloudflare because cloudflare will mask the root origin ips of your clients
where we want the real ips so to get that we install this plugin so let's go ahead and click on
install plugin now traffic's really good they've given us a quick snapshot on how to get this going
and i'm going to show you what it all means so basically the start here we have the file the yaml
we want to copy that that's if you followed our setup to set up your traffic of course
you may be using a different setup now the most important thing to note here is that it says it
goes into our traffic static configuration now that means it's our main traffic configuration
file the dynamic configuration is that other file that we have of course that will update
on the fly when you need it so first and foremost we need to grab this one here
and here we are on code server if you guys haven't seen our video on code server be sure to check
that out it's really really handy as you can see under the forwarded headers we've actually
got trusted ips here listed now this is part of our cloudflare ips and we can't do it this way
or we can do it with the plugin which is what we're showing you today
so at the very bottom of this file we'll paste in the command that it gave us on that other screen
keep in mind once we start adding more plugins you don't need to be adding these two headers again
you can just copy from the obviously the name of the plugin which we'll show you as we go along
so the first one we've got is traffic reel ip go ahead and click save and make sure you save that
and once you're done restart your traffic container any changes made in the static file
require a restart of the container so let's go ahead and do that now okay so we've restarted
traffic and we confirmed that traffic is back up now so that this plugin has been loaded so now we
can move on to the next step which is putting our dynamic config in here so let's click copy
and back in code server we can see we have our traffic yml which like i said is the main static
config file now this file is the dynamic file file config.yml now the section we want to be
under is middleware so as you can see we have auth security headers and gzip so right underneath that
i'm going to go ahead and add this one except we don't need the two initial headers they're
already there so let's get rid of those but the first thing you'll notice is of course
that the indentation is incorrect because the name of the plugin should be lined up with the rest of
them we'll just need to adjust that and with the control and then the right closed bracket and left
bracket we can easily shift that around so what we want to do is move that over to underneath gzip
and that will line it up perfectly well go ahead and click save and as this is a middleware the
next thing we really want to do is add this into the static file and allow it to filter over all of
our traffic so in our static file if you go to the https and under middlewares you can see we
have security headers there and gzips there as well i'm going to do the same thing except i'm
going to add traffic real ip and at file okay now that's referencing our file that's here
so they can pull in this real ip plugin now what we're doing here is saying we want to apply this
middleware to all connections via https if you only want to apply it to one container or one app
then you would add it as a middleware under that app and once we've done that let's go ahead and
restart traffic again so that it can pull through this static config change that we just applied
now guys that is essentially installing the plugin some settings and instructions will change
of course depending on which plugin you get now here's our other fork that i'd really recommend
you guys check out obviously one is failed to ban now that just helps add another layer of
security for your setup now the instructions for the fail to ban plug-in are a little longer and
comprehensive so that will obviously take a little bit more time but again the essential
configuration is you're going through what it's giving you and it's pretty straightforward
and gives you another way to help protect your self-hosted instance now another one which is
popular is the log for shell plug-in now obviously this is a large vulnerability that hit last year
or so now this plug-in will essentially help you cover yourself for that vulnerability as well now
it gives you a couple of different things you can add labels to apply this log-4 shell vulnerability
scanner or we can add the middleware directly into our static file like i showed you just before the
next plugin would recommend is the deny ip plugin now this is something that you can also accomplish
if you're using something like cloudflare but i believe it limits you to a certain number of rules
i can't remember exactly but if you didn't have that option maybe you're not even using cloudflare
this is a valid option you can use so we can block based on the geolocation of the ips coming through
very similar thing we put the static file config there as well and then we also put the dynamic
config as well now another one we recommend is simple cache now there was another cache
one on there that might be a little intense if you're not sure how to go through it this one's
a lot easier and gives you the same functionality basically it allowed traffic to cache responses
on your disk now this can speed up the process quite a bit and allow it to respond quickly to
requests that are quite frequent but pretty handy and pretty straightforward to set up
as well you've got your middleware and you have your study config there as well
now the last one we'll recommend since we have recently touched the subject only two weeks ago
is the theme park plug-in now this plug-in like i said in that original video if you haven't seen it
will automatically apply themes on the rewrite level so it will rewrite the http pages and this
will help you apply themes across from the top level of traffic down to all the applications that
support it so that's another way to go ahead and do it as well be sure to check that out and
support the project as well so guys that's traffic plug-ins for you thanks for tuning in today really
appreciate having you guys here and i hope it helped you out if it did please like and subscribe
to the channel it really helps us out why don't you let us know your thoughts in the comments
below we'd love to have a read as well thanks guys and we'll see you in the next hibricorp video
so
you