GeoIP2#

GeoIP2 模块通过客户端的 IP 地址（默认）或特定变量的值实现对 MaxMind GeoIP2 数据库的查找。它支持 IPv4 和 IPv6。

加载模块#

要使用该模块，必须在 main{} 的上下文中加载它：

load_module modules/ngx_http_geoip2_module.so;    # 用于 http{} 块
load_module modules/ngx_stream_geoip2_module.so;  # 用于 stream{} 上下文

在下面的配置示例中，除了模块本身的指令外，还使用了 echo 模块的指令：

load_module modules/ngx_http_echo_module.so;

配置示例#

http {
    geoip2 /var/lib/GeoIP/GeoLite2-Country.mmdb {
        auto_reload 1h;
        $geoip2_country_code default=RU source=$http_x_forwarded_for country iso_code;
        $geoip2_country_name source=$http_x_forwarded_for country names ru;
    }

    log_format with_geoip '$server_port $remote_addr - $remote_user [$time_local] "$request" '
                           '$status $body_bytes_sent "$http_referer" '
                           '"$http_user_agent" "$http_x_forwarded_for" "$http_host" '
                           'country="$geoip2_country_code"';

    map $geoip2_country_code $denied {
        PL "1";
        QA "1";
    }

    server {
        listen 80;
        root /usr/share/angie/html;
        index index.html index.htm;
        access_log /var/log/angie/geoip_access.log with_geoip;

        if ($denied) {
            return 403;
        }

        location / {
            echo "ip = $http_x_forwarded_for";
            echo "code = $geoip2_country_code";
            echo "name = $geoip2_country_name";
        }
    }
}

请求执行示例#

$ curl -H'X-Forwarded-For: 51.68.138.153' http://127.0.0.1

<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>Angie/1.8.3</center>
</body>
</html>

$ curl -H'X-Forwarded-For: 8.8.8.8' http://127.0.0.1

ip = 8.8.8.8
code = US
name = United States

$ curl -H'X-Forwarded-For: 77.88.44.242' http://127.0.0.1

ip = 77.88.44.242
code = RU
name = Russia

附加信息#

详细文档和源代码可在以下地址获取： leev/ngx_http_geoip2_module

目录