caddy-analyzer: The security-first log analyzer Caddy has been missing

说明与用途

caddy-analyzer 自动解析 Caddy v2 JSON 日志，检测 26 类攻击，实时阻断 IP，并提供仪表盘和报告。

问题

Standard log analysis tools cannot parse Caddy v2’s nested JSON logs and lack security threat detection, forcing users to write brittle custom scripts.

结果

caddy-analyzer enables automated parsing of Caddy JSON logs, detects 26 attack categories, blocks malicious IPs in real time, and provides dashboards and reports, eliminating custom scripting and improving security posture.

工作流

• Install caddy-analyzer via curl script or download binary
• Configure log path with caddy-analyze config /var/log/caddy/access.log
• Run full security scan with caddy-analyze --detect
• Stream live logs with detection using caddy-analyze tail --detect docker://my-caddy
• Launch interactive dashboard with caddy-analyze --watch
• Use caddy-analyze guard docker://my-caddy for automatic iptables blocking

证据

caddy-analyzer is a CLI tool (written in Go) that natively parses Caddy v2 structured JSON logs and layers a full security detection engine on top.

来源

The guard subcommand monitors your log stream and auto-blocks malicious IPs via iptables.

来源

Performance: ~7,000 lines/sec with detection, ~70,000 lines/sec parse‑only.

来源