Comment

Comment on geoip location of the connections

For HTTP/web server logs: goaccess

For other connections (SSH etc.), setup a Graylog instance, send all your logs to it using rsyslog over TLS, setup pipelines to extract IP addresses from the messages, and setup the GeoIP plugin (graylog.org/…/how-to-set-up-graylog-geoip-configu…). It’s not a small task though. My ansible roles for goaccess and graylog.

source

Sort:hotnew top

entropicshart@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
How I wish I had seen this about a month ago when I spent hours smarting up the nginx module and converting the maxmind DBs to v1 to make the compatible.

I do wonder how well this performs compared to the nginx module

source
supervent@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago
Thanks for the answers, but my specs are very low (intel atom with 2GB ram), I only wanted to know which countries are using my snowflake tor bridge.

source
- vegetaaaaaaa@lemmy.world ⁨1⁩ ⁨year⁩ ago
  Graylog and elasticsearch might fit on that, depending on how much is already used, and if you set the heap sizes at their bare minimum… but it will perform badly, and it’s overkill anyway if you just need this simple stat.
  
  I would look into writing a custom log parser for goaccess (goaccess.io/man#custom-log) and let it parse your bridge logs. This is how the geolocation section looks in the HTML report (each continent can be expanded and it will reveal the stat by country).
  
  Image
  
  I update the report every hour via cron, as I don’t need real-time stats (but goaccess can do that). Ansible role here.
  
  source