Package: src:trafficserver
Version: 9.1.1+ds-1
Severity: normal

trafficserver 9.1.0 added[1] the "maxmind acl" plugin, to replace the
geoip acl plugin. The geoip plugin uses the deprecated libgeoip library,
which uses the legacy GeoIP/GeoLite databases. The maxmind plugin uses
instead the replacement libmaxminddb library (by the same upstream, and
btw with myself as the Debian maintainer), which can use the GeoIP2 or
GeoLite2 databases, or any other databases in the openly documented MMDB
format (e.g. DB-IP's databases).

Adding support in the package is just a matter of adding a
libmaxminddb-dev dependency, and shipping the generated
/usr/lib/trafficserver/modules/maxmind_acl.so. The build system
automatically detects the presence of the library and builds the plugin.

I would advise to remove the libgeoip-dev dependency and to stop
shipping the geoip plugin, as no up-to-date/accurate databases will be
available during the bookworm cycle. If you do decide in keeping that
plugin for backwards-compatibility reasons, however, I would strongly
advise to pass --with-hrw-geo-provider=maxminddb, in order to pick
maxminddb over geoip in the presence of both.

Thanks for the consideration and for caring for this package!

Regards,
Faidon

1: 
https://github.com/apache/trafficserver/commit/b757688230b82ffaa61aec401b5d026cf0e20dc0

Reply via email to