Bug #6157
closedMaxMind changes acces to its free GeoIP dbs
100%
Description
As described in https://blog.maxmind.com/2019/12/18/significant-changes-to-accessing-and-using-geolite2-databases/, GeoIP changed database access policy. Because of assumed legal problems, db is still free, but access is tied to an account now. So we'll need something akin to:
- rewrite GeoIpEnricherPlugin to use the new access method
- add configuration options for Maxmind credentials
- update docs to advise admins to create Maxmind account
- create account and configure creds ourselves for Cesnet
- use different source of GeoIP data
- drop the plugin altogether
Related issues
Updated by Pavel Kácha over 4 years ago
Radko Krkoš wrote:
Option 3 does not follow the predicate.
I never set out to be consistent.
BTW seems there are alternatives, even in (drop-in) mmdb format: https://db-ip.com/db/lite.php
(So that might be cheapest - in terms of manhours - alternative.)
Updated by Jan Mach over 4 years ago
- Status changed from New to In Progress
Pavel Kácha wrote:
Radko Krkoš wrote:
Option 3 does not follow the predicate.
I never set out to be consistent.
BTW seems there are alternatives, even in (drop-in) mmdb format: https://db-ip.com/db/lite.php
(So that might be cheapest - in terms of manhours - alternative.)
There is no need to make any changes in GeoIP enricher plugin. It is only needed to change the utility script fetch-geoipdb.sh, that is being launched periodically via cron and takes care of downloading latest free GeoIP data files. I think it is valid to require that the administrator registers account to enable downloading these files in case he wishes to use this feature. The https://db-ip.com/db/lite.php alternative does not support free IP to ASN database, so there would be a regression.
Updated by Jan Mach over 4 years ago
- Related to Bug #6156: Enricher GeoipEnricherPlugin crashes on nonexistent GeoIP file added
Updated by Jan Mach over 4 years ago
- Status changed from In Progress to Closed
- % Done changed from 0 to 100
- To be discussed changed from Yes to No
I have removed all scripts and configuration related to retrieving GeoIP databases from MaxMind. Recommended approach is to use their geoipupdate utility. Documentation was updated to reflect these changes, administrator is required to install and configure geoipupdate utility himself and make sure there will be IP geolocation database files present on target system that the Mentat system can then use. It is now listed as installation prerequisite. It is not possible to use Debian package dependency system for this, because Debian packages are provided, but they are not available in the repositories.
For convenience the ansible role was created to help with this task. I now consider this issue to be resolved.