coop-cloud/traefik
7
2
Fork 20
Code Issues 17 Pull Requests 6 Releases Wiki Activity

enable geoip databases on anubis #156

New Issue
Open
opened 2026-11-10 17:51:20 +00:00 by fauno · 5 comments
fauno commented 2026-11-10 17:51:20 +00:00
Owner
Copy Link
Copy Source

anubis supports geoip databases from maxmind, which are a commercial subscription and the latest geoiplite databases i tracked are from december 2019. would that too old in internet terms?

there are asn databases that are open, so for more up to date databases it's either adding support on anubis for those or converting them to mmdb. i think the first would be easier, since i never found a reliable way to create my own mmdb (the write libraries i found were too old or incomplete afair)

for a basic poc i could add the config file and instructions on how to add the file?

[anubis supports geoip databases](https://anubis.techaro.lol/docs/admin/geoip) from maxmind, which are a commercial subscription and the latest geoiplite databases i tracked are from december 2019. would that too old in internet terms? there are asn databases that are open, so for more up to date databases it's either adding support on anubis for those or converting them to mmdb. i think the first would be easier, since i never found a reliable way to create my own mmdb (the write libraries i found were too old or incomplete afair) for a basic poc i could add the config file and instructions on how to add the file?
fauno added the enhancementhelp wanted labels 2026-11-10 17:51:20 +00:00
fauno self-assigned this 2026-11-10 17:51:20 +00:00
fauno commented 2026-11-10 17:55:31 +00:00
Author
Owner
Copy Link
Copy Source

well i just found seemingly updated databases, tbd if the source is trustable

https://github.com/P3TERX/GeoLite.mmdb/

well i just found seemingly updated databases, tbd if the source is trustable https://github.com/P3TERX/GeoLite.mmdb/
fauno commented 2026-11-10 19:20:48 +00:00
Author
Owner
Copy Link
Copy Source

well i deployed it but it's difficult to see if it's having any effect. currently i can see the asns are being logged, and ali baba which is my current nuisance is being denied, but apparently by another rule. i'm still getting lots of requests on forgejo that can't be seen on anubis logs, i'm not sure why yet

well i deployed it but it's difficult to see if it's having any effect. currently i can see the asns are being logged, and ali baba which is my current nuisance is being denied, but apparently by another rule. i'm still getting lots of requests on forgejo that can't be seen on anubis logs, i'm not sure why yet
fauno commented 2026-11-10 20:03:54 +00:00
Author
Owner
Copy Link
Copy Source

ok, i'm seeing ~370 distinct ip addresses from ali baba that anubis says it's blocking when they do 1 request, but i'm also seeing 1 request each on forgejo's access log. i can't tell now if it's the same request or they're two separate requests, because anubis isn't logging the url

ok, i'm seeing ~370 distinct ip addresses from ali baba that anubis says it's blocking when they do 1 request, but i'm also seeing 1 request each on forgejo's access log. i can't tell now if it's the same request or they're two separate requests, because anubis isn't logging the url
fauno commented 2026-11-10 20:57:09 +00:00
Author
Owner
Copy Link
Copy Source

ended up blocking the entire subnets of the asn because i couldn't tell if anubis was being bypassed or not consistently blocking requests.

but the asns do appear on logs and metrics, so this pr is still useful

ended up blocking the entire subnets of the asn because i couldn't tell if anubis was being bypassed or not consistently blocking requests. but the asns do appear on logs and metrics, so this pr is still useful
fauno commented 2026-11-10 20:57:45 +00:00
Author
Owner
Copy Link
Copy Source

i'm missing documentation on how to upload the databases to the volume, abra app copy didn't work

i'm missing documentation on how to upload the databases to the volume, `abra app copy` didn't work
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No labels enhancement help wanted
Milestone
No items
No Milestone
Assignees
Clear assignees
3wordchant aadil (Aadil Ayub) abra-bot (Abra Bot) ammaratef45 amras (Sarma) BornDeleuze (Born Deleuze) Brooke carla cas (Cassowary) coopcloud dannygroenewegen (Danny Groenewegen) decentral1se (d1) devydave fauno (fauno) hex (Josh Dukes) javielico (Javielico) jjsfunhouse kawaiipunk (KawaiiPunk) knoflook moosemower moritz notplants oxaliq (sorrel) p4u1 (p4u1) renovate-bot (Comrade Renovate Bot) simon stevensting (stevensting) trav (Trav Fryer) yksflip
No Assignees fauno
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: coop-cloud/traefik#156