Re: Geoip database update
On Sat, Dec 17, 2022 at 04:58:18PM -0800, Randy Bush wrote:
> https://www.rfc-archive.org/getrfc?rfc=9092
>
> and note that massimo has a collio toolset
>
> https://github.com/massimocandela/geofeed-finder
Rpki-client (version 8.2 and higher) supports authenticating signed
Geofeed data against the RPKI:
First figure out the location of the Geofeed data (the above mentioned
'geofeed-finder' utility will do a better job searching at scale!):
$ whois -h whois.ripe.net 2001:67c:208c::/48 | egrep 'inet6num|Geofeed '
inet6num: 2001:67c:208c::/48
remarks:Geofeed https://sobornost.net/geofeed.csv
Then validate the embedded signature:
$ sudo apt install rpki-client && sudo systemctl start rpki-client
$ wget https://sobornost.net/geofeed.csv
$ rpki-client -j -f geofeed.csv
{
"file": "geofeed.csv",
"hash_id": "VOXBRdQpiyALlLRdo3OkLbLIY4PexRlci/0EM9Fc21U=",
"type": "geofeed",
"ski": "D4:05:34:DB:56:A6:4D:A2:ED:4D:EF:AD:A9:C1:31:DA:19:56:DC:A7",
"cert_issuer": "/CN=caa805dbac364749b9b115590ab6ef0f970cdbd8",
"cert_serial": "06",
"aki": "CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8",
"aia":
"rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer",
"valid_until": 1700930092,
"records": [
{ "prefix": "2001:67c:208c::/48", "location":
"NL,NL-NH,Amsterdam,"}
],
"validation": "OK"
}
Kind regards,
Job
Re: Geoip database update
> > darn shame there is no general automatable mechanism for this too many folk have written to ask. here is the clue by four https://www.rfc-archive.org/getrfc?rfc=9092 and note that massimo has a collio toolset https://github.com/massimocandela/geofeed-finder randy
Re: Geoip database update
darn shame there is no general automatable mechanism for this randy
Re: Geoip database update
I've been waiting for some updates since September, there are good and reputable geoIP services that accept updates and those that refuse to acknowledge issues or have no way to update. Some of the financial institutions and government agencies are examples of bad consumers of them, but it's not limited to them. If you run a service or engage in geo blocking because of licensing or something else, provide an internal escalation path for the customer to have you contact the ISP, or compare the data with published Geofeeds or similar. The issue is even with ARIN 4.10 space that was previously unused. - Jared Sent via RFC1925 compliant device > On Dec 17, 2022, at 12:42 PM, Norman Jester wrote: > > I have found that to be impossible. > There are a few geoip databases but they all tend to operate the same, with > specific update periods. I’ve been on the phone with maxmind etc and they > simply have no way to help and say we must wait. It’s really sad how they > control so much important data yet care not about the impact their control > has when they are wrong. > > Norman Jester > > >> On Dec 17, 2022, at 9:31 AM, Mehmet Akcin wrote: >> >> Hi >> >> Is there a way to force update/flush geoip database faster than 30 days? >> >> I am trying to help a customer resolve some issues due to geoip. >> >> Thanks in advance >> -- >> Mehmet >> +1-424-298-1903
Re: Geoip database update
*nods* This does seem ridiculous. Two days would seem more appropriate. - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Norman Jester" To: "Mehmet Akcin" Cc: "nanog" Sent: Saturday, December 17, 2022 11:39:45 AM Subject: Re: Geoip database update I have found that to be impossible. There are a few geoip databases but they all tend to operate the same, with specific update periods. I’ve been on the phone with maxmind etc and they simply have no way to help and say we must wait. It’s really sad how they control so much important data yet care not about the impact their control has when they are wrong. Norman Jester > On Dec 17, 2022, at 9:31 AM, Mehmet Akcin wrote: > > Hi > > Is there a way to force update/flush geoip database faster than 30 days? > > I am trying to help a customer resolve some issues due to geoip. > > Thanks in advance > -- > Mehmet > +1-424-298-1903
Re: Geoip database update
I have found that to be impossible. There are a few geoip databases but they all tend to operate the same, with specific update periods. I’ve been on the phone with maxmind etc and they simply have no way to help and say we must wait. It’s really sad how they control so much important data yet care not about the impact their control has when they are wrong. Norman Jester > On Dec 17, 2022, at 9:31 AM, Mehmet Akcin wrote: > > Hi > > Is there a way to force update/flush geoip database faster than 30 days? > > I am trying to help a customer resolve some issues due to geoip. > > Thanks in advance > -- > Mehmet > +1-424-298-1903
Re: Geoip database update
Nope The geo location provider generally update their database every two weeks, then their customer will take at least another two weeks. So a month is actually a fast timeline. On Sun, 18 Dec 2022 at 02:30, Mehmet Akcin wrote: > Hi > > Is there a way to force update/flush geoip database faster than 30 days? > > I am trying to help a customer resolve some issues due to geoip. > > Thanks in advance > -- > Mehmet > +1-424-298-1903 > -- -- Kind regards. Lu
Geoip database update
Hi Is there a way to force update/flush geoip database faster than 30 days? I am trying to help a customer resolve some issues due to geoip. Thanks in advance -- Mehmet +1-424-298-1903
