This is the biggest release since the project started. It lays the foundation for AUTOPILOT, a self-tuning layer for your blocklists, and it gives you control over how many feeds you run, which matters if your gateway is a UDM or UDR.
AUTOPILOT, phase 1 (report-only)
AUTOPILOT's goal: know which of your feeds actually earn their place, and plan how to fit the best ones into your device's limits.
What ships today is the planning foundation:
- Per-feed telemetry that keeps "we have no data" separate from "zero hits". A feed that is not monitored shows as unknown, never as a false zero.
- A deterministic capacity estimator, so you can see what fits before anything is imported.
- Release metadata checks and a roadmap for the phases ahead.
What it does not do yet: it has no collector or CLI wired in, and it never changes, disables or quarantines a feed on its own. Phase 1 recommends, you decide. Automatic action is a later phase and will be opt-in.
Feed presets
Set PRESET=embedded, server or max.
embedded: about 20K IPs, safe for UDM and UDR class devices, with decisions capped at 15,000.server: the legacy set minus the noisiest and dead feeds.max: everything, the pre-3.9 behavior.
Explicit ENABLE_* values always win. Nothing changes by default in this release. A loud warning tells you the default will move to PRESET=server in v4.0.
Better visibility
- Per-feed Prometheus gauges: last success, entries, unique contribution, HTTP status.
- Structured scenario names (
external/blocklist-import/<feed>/c<confidence>) so downstream tools can rank imported IPs by feed quality. - Per-feed license metadata in
--list-sources, withattribution_requiredandcommercial_okflags. FAIL_ON_DEAD_FEED=trueexits non-zero when an enabled feed fails to fetch. Running with zero feeds now fails loudly instead of importing nothing.- A live CrowdSec round-trip test in CI.
Also in this release
- Data-Shield IPv4 added as a feed that stays off under every preset until you enable it.
- Optional monitoring stack (Grafana and Prometheus) and a hardened setup wizard that no longer echoes secrets (thank you @83raiders, #112).
- Alpine-based Docker image, Helm chart, and Unraid Community Apps template.
- Removed the dead Monty Security C2 feed. Docs now match the code: 32 feeds listed by
--list-sources, Python 3.9+. - The Avastel residential-proxy list is on the roadmap for research, thanks to @pschiffe's suggestion (#114).
Thank you
@83raiders for the wizard and monitoring work, @pschiffe for the Avastel idea, @gaelj for the foundations this still builds on, and everyone who filed issues and tested.
Tell us what you think
AUTOPILOT is better if it is built around how you run things. If you try this release, please open an issue or start a discussion with your feedback: which feeds you would trust it to retire, what limits you hit on your hardware, and what you want to see in phase 2. If you like it, please consider a post on Reddit (r/homelab and r/selfhosted are good fits) and suggest it to friends and others who run CrowdSec or UniFi. The project only grows because of people like you.
Full changelog: v3.8.0...v3.9.0