# Multiple bouncers overkill?

**URL:** <https://discourse.crowdsec.net/t/multiple-bouncers-overkill/1327>\
**Category:** crowdsec\
**Created:** [June 23, 2023, 3:29pm UTC](https://discourse.crowdsec.net/t/multiple-bouncers-overkill/1327 "2023-06-23T15:29:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![fvsadem](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/fvsadem/32/457_2.png) [@fvsadem](https://discourse.crowdsec.net/u/fvsadem)\
**Post date:** [June 23, 2023, 3:29pm UTC](https://discourse.crowdsec.net/t/multiple-bouncers-overkill/1327/1 "2023-06-23T15:29:39Z")

</div>

Hi,

Still learning crowdsec, i have very big difficulties with bouncers. ☹

My server is based on containerised apps (lots of web apps, with apache or nginx for web servers). My ingress is traefik for reverse proxy things.

I have installed firewall bouncer and traefik bouncer. I have installed all collections for apache, nginx, traefik and ftp to parse the logs and to have all scenarios…

Do i need to install a bouncer for all specifics web server (apache/php bouncer + nginx bouncer) ?  
Is traefik bouncer will already do the job ?

Sorry but the doc is not clear about bouncers… it’s very hard to understand the purpose of all things.

Thanks

---

<div class="post-metadata">

**Author:** ![iiAmLoz](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/iiamloz/32/386_2.png) [@iiAmLoz](https://discourse.crowdsec.net/u/iiAmLoz)\
**Post date:** [June 25, 2023, 12:23pm UTC](https://discourse.crowdsec.net/t/multiple-bouncers-overkill/1327/2 "2023-06-25T12:23:03Z")

</div>

So its all personal preference, however, my opinion is traefik and firewall is enough for your setup.

The docs cant tell you how to set things up as its all personal preferences, it’s very common for most users to use firewall + a web server since they may be proxing through a CDN that bypasses the firewall bouncer.

---

<div class="post-metadata">

**Author:** ![DuvelCorp](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/duvelcorp/32/529_2.png) [@DuvelCorp](https://discourse.crowdsec.net/u/DuvelCorp)\
**Post date:** [June 30, 2023, 1:36pm UTC](https://discourse.crowdsec.net/t/multiple-bouncers-overkill/1327/3 "2023-06-30T13:36:41Z")

</div>

The point is to run crowdsec against the traffic entering your “main entrance”, ie the internet-facing proxy. Which seems to be your traefik . You can eventually also run the agent on the main router/firewall of your infrastructure if it supports it.  
But every other webserver coming after your traefik doesn’t need it at all, unless you define a set of completely different rules that would block additional things that the first one would not have blocked… and all this would indeed be totally overkill