From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from relay.hostedemail.com (smtprelay0011.hostedemail.com [216.40.44.11]) by sourceware.org (Postfix) with ESMTPS id 1B7E33858401 for ; Thu, 18 Apr 2024 18:34:36 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 1B7E33858401 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=SystematicSw.ab.ca Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=SystematicSw.ab.ca ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 1B7E33858401 Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=216.40.44.11 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1713465279; cv=none; b=xrSN8RczXi7N2mygFkUCKV5cg4mppaSO/U2WJ1V8DKBDKqGs5O85qOr/EUYNrZ1NgQYWQH92pZJuNAJuNc8o4cd6kvucrWB6AVvxGiPmYvlUfQXKagLfQ4Q4j2Nw425GQlhqNRIRYFnQGkpfsUI8O28K6fvF30yLYnhhfNc4vmw= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1713465279; c=relaxed/simple; bh=7rDcuD6Yt+G8VrtSrf7v/lUUWbErr5ioIM+sADwAGzA=; h=Message-ID:Date:MIME-Version:From:Subject:To; b=w0eziI7DkXYazy+WLxGJKHktYQza1kPnc1fCjo8njr5rYqJyLpjsfkW9uNsel1DK56bQhCpwKrRn9OUxnpQeTR0LgfhZ2waSHQPo6i6RCcrDGeCXN4+JuI3QBmTaruRE25fTeNoS0lV+hDljx7A3mCr3xvegP17d0dfFJ094ozM= ARC-Authentication-Results: i=1; server2.sourceware.org Received: from omf16.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay02.hostedemail.com (Postfix) with ESMTP id A23DC12018B for ; Thu, 18 Apr 2024 18:34:35 +0000 (UTC) Received: from [HIDDEN] (Authenticated sender: Brian.Inglis@SystematicSW.ab.ca) by omf16.hostedemail.com (Postfix) with ESMTPA id 2F69120016 for ; Thu, 18 Apr 2024 18:34:34 +0000 (UTC) Message-ID: <76514121-ce79-4284-9890-de1158695ad3@SystematicSw.ab.ca> Date: Thu, 18 Apr 2024 12:34:33 -0600 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: Brian Inglis Reply-To: cygwin-apps@cygwin.com Subject: Re: [ITA] GeoIP, GeoIP-database, geoipupdate Content-Language: en-CA To: cygwin-apps@cygwin.com References: <93c20bcc-40c7-4a89-bf18-ff3b34676036@SystematicSW.ab.ca> <632e0c62-390f-4152-8f66-bf2e040acbcc@dronecode.org.uk> Organization: Systematic Software In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 2F69120016 X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,KAM_DMARC_STATUS,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,SPF_PASS,TXREP,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.6 X-Stat-Signature: mznuzo66phrup9hma49735wuir6nsdy7 X-Rspamd-Server: rspamout05 X-Session-Marker: 427269616E2E496E676C69734053797374656D6174696353572E61622E6361 X-Session-ID: U2FsdGVkX1/mxfBfs22TCB/tJHOO0J1dkj6OP4h7QrU= X-HE-Tag: 1713465274-889981 X-HE-Meta: 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 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 2024-04-17 13:38, Jon Turney via Cygwin-apps wrote: > On 17/04/2024 00:39, Brian Inglis via Cygwin-apps wrote: >> On 2024-04-16 13:31, Jon Turney via Cygwin-apps wrote: >>> On 13/04/2024 14:09, Brian Inglis via Cygwin-apps wrote: >>>> I would like to adopt and revive the above packages with the last >>>> ("unofficial") version of the legacy code committed noted in the ChangeLog >>>> as 1.7.0, and a new upstream source for legacy format free databases >>>> converted when the official current upstream databases are updated. >>> >>> My very limited, vague understanding was that GeoIP is obsolete and users >>> should move to something newer? What packages do we have that actually depend >>> on this? Are there other ways to update them? >> >> $ cygcheck-dep -nqS libGeoIP1 libmaxminddb0 >>   libGeoIP1: is needed for ( GeoIP libdns1104 libdns1105 libdns166 libdns169 >> libGeoIP-devel ) >>   libmaxminddb0: is needed for ( bind libdns1106 libmaxminddb-devel >> lighttpd-mod_maxminddb ) >> >> Looks like older bind used free legacy GeoIP databases, "current" bind uses >> current library and current GeoIP2 databases which require free registration >> to get an API key with limits. >> The new upstream source for free legacy GeoIP databases converts upstream >> GeoIP2 databases and makes them available under its CC-by-4.0 licence. > > The most recent bind package was built with '--without-geoip'.  Does this need > to change back again? It was built with libmaxminddb which requires the Maxmind API key registration to download the free but not publicly available GeoLite2 and new geoipupdate which can only download from new databases with the new API and registered key. https://cygwin.com/packages/summary/libdns1106.html https://geoip.site/ [another legacy alternative] https://dev.maxmind.com/geoip/geolite2-free-geolocation-data This supports bind geoDNS applications like geo-[b]locking and geo-redirection. >> $ cpm-sum libdns1{6{6,9},10{4,5,6}} | grep >> 'dns\|bind\|maxmind\|GeoIP\|depends:\|ackage:$' >> Package: libdns166 >>     depends: >>     cygwin, libGeoIP1, libgssapi_krb5_2, libisc160, libjson-c2, libkrb5_3, >>     rdepends: >>     dnsperf, libbind9_160, libirs160, libisccfg160 >>     source package: >>     bind > > I guess there's another thread to pull on here. > > The code which looks for "old soversions we don't need to keep anymore" isn't > smart enough currently to realize that it can get rid of all of these old libdns > soversions. > > Assuming that gets fixed (...), do we still have users? The main user may still be the GeoIP binary package utilities geoiplookup/6. I and presumably others use them in scripts to inform where sites and addresses are likely geo or net located or distributed; for example: $ geoiplookup sourceware.org GeoIP Country Edition: US, United States GeoIP City Edition, Rev 1: US, 00, N/A, N/A, N/A, 37.750999, -97.821999, 0, 0 GeoIP ASNum Edition: AS17314 REDHAT-HOSTED $ geoiplookup redhat.com GeoIP Country Edition: US, United States GeoIP City Edition, Rev 1: US, VA, Virginia, Ashburn, 20149, 39.046902, -77.490303, 511, 0 GeoIP ASNum Edition: AS14618 AMAZON-AES $ geoiplookup ibm.com GeoIP Country Edition: US, United States GeoIP City Edition, Rev 1: US, WA, Washington, Seattle, 98160, 47.603401, -122.341400, 819, 0 GeoIP ASNum Edition: AS16625 AKAMAI-AS $ geoiplookup geoip.site GeoIP Country Edition: US, United States GeoIP City Edition, Rev 1: US, 00, N/A, N/A, N/A, 37.750999, -97.821999, 0, 0 GeoIP ASNum Edition: AS13335 CLOUDFLARENET $ geoiplookup6 dronecode.org.uk GeoIP Country V6 Edition: GB, United Kingdom GeoIP ASNum V6 Edition: AS44684 Mythic Beasts Ltd GeoIP City Edition V6, Rev 1: GB, 00, N/A, N/A, 51.496399, -0.122400, 0, 0 $ geoiplookup mythic-beasts.com GeoIP Country Edition: GB, United Kingdom GeoIP City Edition, Rev 1: GB, 00, N/A, N/A, N/A, 51.496399, -0.122400, 0, 0 GeoIP ASNum Edition: AS44684 Mythic Beasts Ltd These show that sourceware, RedHat, IBM, and geoip.site all use CDNs; geoip.site and dronecode (and RPi), are all hosted by Mythic Beasts, and their geoloc places them in the Docklands at Millwall near two of their colos! The accuracy radius (2nd last #) in km follows lat, long, but from often within .01 of that value, e.g. 511 => ~5 actual ~3.3km from AWS US-East-1; 819 => ~8 actual ~2km from Seattle Colo with Equinix, Shaw(/Rogers), other colos, and another ~600m from H5, and 1-15km from Cisco, Cyxtera, other SEA1. These legacy files converted from Maxmind GeoLite2 sources appear to be somewhat better than the previous Maxmind legacy GeoLite and CSV sources. -- Take care. Thanks, Brian Inglis Calgary, Alberta, Canada La perfection est atteinte Perfection is achieved non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add mais lorsqu'il n'y a plus rien à retirer but when there is no more to cut -- Antoine de Saint-Exupéry