Geoip database update
Hi Is there a way to force update/flush geoip database faster than 30 days? I am trying to help a customer resolve some issues due to geoip. Thanks in advance -- Mehmet +1-424-298-1903
Nope The geo location provider generally update their database every two weeks, then their customer will take at least another two weeks. So a month is actually a fast timeline. On Sun, 18 Dec 2022 at 02:30, Mehmet Akcin <mehmet@akcin.net> wrote:
Hi
Is there a way to force update/flush geoip database faster than 30 days?
I am trying to help a customer resolve some issues due to geoip.
Thanks in advance -- Mehmet +1-424-298-1903
-- -- Kind regards. Lu
I have found that to be impossible. There are a few geoip databases but they all tend to operate the same, with specific update periods. I’ve been on the phone with maxmind etc and they simply have no way to help and say we must wait. It’s really sad how they control so much important data yet care not about the impact their control has when they are wrong. Norman Jester
On Dec 17, 2022, at 9:31 AM, Mehmet Akcin <mehmet@akcin.net> wrote:
Hi
Is there a way to force update/flush geoip database faster than 30 days?
I am trying to help a customer resolve some issues due to geoip.
Thanks in advance -- Mehmet +1-424-298-1903
*nods* This does seem ridiculous. Two days would seem more appropriate. ----- Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP ----- Original Message ----- From: "Norman Jester" <nj@jester.mx> To: "Mehmet Akcin" <mehmet@akcin.net> Cc: "nanog" <nanog@nanog.org> Sent: Saturday, December 17, 2022 11:39:45 AM Subject: Re: Geoip database update I have found that to be impossible. There are a few geoip databases but they all tend to operate the same, with specific update periods. I’ve been on the phone with maxmind etc and they simply have no way to help and say we must wait. It’s really sad how they control so much important data yet care not about the impact their control has when they are wrong. Norman Jester
On Dec 17, 2022, at 9:31 AM, Mehmet Akcin <mehmet@akcin.net> wrote:
Hi
Is there a way to force update/flush geoip database faster than 30 days?
I am trying to help a customer resolve some issues due to geoip.
Thanks in advance -- Mehmet +1-424-298-1903
I've been waiting for some updates since September, there are good and reputable geoIP services that accept updates and those that refuse to acknowledge issues or have no way to update. Some of the financial institutions and government agencies are examples of bad consumers of them, but it's not limited to them. If you run a service or engage in geo blocking because of licensing or something else, provide an internal escalation path for the customer to have you contact the ISP, or compare the data with published Geofeeds or similar. The issue is even with ARIN 4.10 space that was previously unused. - Jared Sent via RFC1925 compliant device
On Dec 17, 2022, at 12:42 PM, Norman Jester <nj@jester.mx> wrote:
I have found that to be impossible. There are a few geoip databases but they all tend to operate the same, with specific update periods. I’ve been on the phone with maxmind etc and they simply have no way to help and say we must wait. It’s really sad how they control so much important data yet care not about the impact their control has when they are wrong.
Norman Jester
On Dec 17, 2022, at 9:31 AM, Mehmet Akcin <mehmet@akcin.net> wrote:
Hi
Is there a way to force update/flush geoip database faster than 30 days?
I am trying to help a customer resolve some issues due to geoip.
Thanks in advance -- Mehmet +1-424-298-1903
<dripping sarcasm> darn shame there is no general automatable mechanism for this randy
<dripping sarcasm> darn shame there is no general automatable mechanism for this
too many folk have written to ask. here is the clue by four https://www.rfc-archive.org/getrfc?rfc=9092 and note that massimo has a collio toolset https://github.com/massimocandela/geofeed-finder randy
On Sat, Dec 17, 2022 at 04:58:18PM -0800, Randy Bush wrote:
https://www.rfc-archive.org/getrfc?rfc=9092
and note that massimo has a collio toolset
Rpki-client (version 8.2 and higher) supports authenticating signed Geofeed data against the RPKI: First figure out the location of the Geofeed data (the above mentioned 'geofeed-finder' utility will do a better job searching at scale!): $ whois -h whois.ripe.net 2001:67c:208c::/48 | egrep 'inet6num|Geofeed ' inet6num: 2001:67c:208c::/48 remarks: Geofeed https://sobornost.net/geofeed.csv Then validate the embedded signature: $ sudo apt install rpki-client && sudo systemctl start rpki-client $ wget https://sobornost.net/geofeed.csv $ rpki-client -j -f geofeed.csv { "file": "geofeed.csv", "hash_id": "VOXBRdQpiyALlLRdo3OkLbLIY4PexRlci/0EM9Fc21U=", "type": "geofeed", "ski": "D4:05:34:DB:56:A6:4D:A2:ED:4D:EF:AD:A9:C1:31:DA:19:56:DC:A7", "cert_issuer": "/CN=caa805dbac364749b9b115590ab6ef0f970cdbd8", "cert_serial": "06", "aki": "CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8", "aia": "rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer", "valid_until": 1700930092, "records": [ { "prefix": "2001:67c:208c::/48", "location": "NL,NL-NH,Amsterdam,"} ], "validation": "OK" } Kind regards, Job
participants (7)
-
Jared Mauch -
Job Snijders -
Lu Heng -
Mehmet Akcin -
Mike Hammett -
Norman Jester -
Randy Bush