GeoIP2#
The GeoIP2 module implements lookup in MaxMind GeoIP2 databases by the client's IP address (by default) or by the value of a specific variable. It supports both IPv4 and IPv6. To work with the module, it is necessary to load it in the context of In the configuration example below, in addition to the directives of the module itself, the directives of the echo module are also used: Detailed documentation and source code are available at:
leev/ngx_http_geoip2_moduleLoading the Module#
main{}:load_module modules/ngx_http_geoip2_module.so; # for use in the http{} block
load_module modules/ngx_stream_geoip2_module.so; # for use in the stream{} context
load_module modules/ngx_http_echo_module.so;
Configuration Example#
http {
geoip2 /var/lib/GeoIP/GeoLite2-Country.mmdb {
auto_reload 1h;
$geoip2_country_code default=RU source=$http_x_forwarded_for country iso_code;
$geoip2_country_name source=$http_x_forwarded_for country names ru;
}
log_format with_geoip '$server_port $remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for" "$http_host" '
'country="$geoip2_country_code"';
map $geoip2_country_code $denied {
PL "1";
QA "1";
}
server {
listen 80;
root /usr/share/angie/html;
index index.html index.htm;
access_log /var/log/angie/geoip_access.log with_geoip;
if ($denied) {
return 403;
}
location / {
echo "ip = $http_x_forwarded_for";
echo "code = $geoip2_country_code";
echo "name = $geoip2_country_name";
}
}
}
Request Execution Examples#
$ curl -H'X-Forwarded-For: 51.68.138.153' http://127.0.0.1
<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>Angie/1.9.0</center>
</body>
</html>
$ curl -H'X-Forwarded-For: 8.8.8.8' http://127.0.0.1
ip = 8.8.8.8
code = US
name = United States
$ curl -H'X-Forwarded-For: 77.88.44.242' http://127.0.0.1
ip = 77.88.44.242
code = RU
name = Russia
Additional Information#