fiorix/freegeoip
Freegeoip
freegeoip is a self-hosted geolocation service and API server that maps IP addresses and hostnames to geographic locations. It functions as a MaxMind database reader, parsing binary geolocation databases to provide location data through a REST interface.
The project distinguishes itself by providing a private alternative to cloud geolocation providers, managing local database files and automating periodic updates. It includes a reverse proxy IP resolver to extract original client addresses from proxy headers, ensuring accurate mapping behind load balancers.
The service incorporates a quota management system to enforce request limits per client and secures its endpoints using TLS encryption and CORS policies. It also features automated database synchronization with checksum-based version verification and an optional public-facing web frontend for performing lookups.
Features
- Geolocation Services - Provides a self-hosted system for determining geographic locations based on IP addresses and hostnames.
- Self-Hosted API Services - Provides a private, self-hosted API server for geographic data to avoid reliance on third-party cloud providers.
- Geolocation Databases - Automates the retrieval and background updating of geolocation databases to ensure lookup accuracy.
- IP Geolocation - Provides a REST API for mapping IP addresses to physical locations and network metadata.
- MMDB Readers - Parses and queries binary MaxMind MMDB files to retrieve location data.
- Reverse Proxy Header Identification - Extracts original client IP addresses from proxy headers to maintain geolocation accuracy behind load balancers.
- Remote-to-Local Database Synchronizers - Automatically synchronizes remote geographic data files to a local instance to keep location data current.
- In-Memory Databases - Loads geolocation databases into system memory to achieve high-speed, low-latency lookups.
- Remote Data Retrieval - Retrieves geographic data files from remote providers using authenticated URLs and license keys.
- Client IP Address Retrieval - Extracts the original client IP address from proxy headers to ensure accurate geolocation behind load balancers.
- Database Version Verifications - Compares local database checksums against remote versions to determine if newer data files are available.
- API Gateway Security - Protects API endpoints using TLS encryption and CORS policies to restrict access to authorized domains.
- Rate Limiting & Abuse Prevention - Controls the volume of incoming requests per client to prevent service abuse.
- Client Request Quotas - Enforces request volume limits per client IP using an in-memory store to prevent API abuse.
- Checksum-Based Updates - Uses cryptographic checksums to detect changes in remote database files before triggering updates.
- Filesystem Polling - Monitors the local filesystem to automatically reload geolocation data files without interrupting server operation.
- Built-in TLS Termination - Implements built-in TLS termination to secure API endpoints and protect data in transit.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
