Re: MirrorManager GEO IP API

[Vratislav Podzimek]

On Thu, 2013-05-02 at 11:07 -0600, Kevin Fenzi wrote:
>  On Tue, 30 Apr 2013 07:56:31 -0500
>  <Matt_Domsch(a)Dell.com&gt; wrote:
>  
>  > I think it would work best to use a dedicated Apache module, such as
>  > http://dev.maxmind.com/geoip/mod_geoip2  rather than add another
>  > interface into MirrorManager which otherwise duplicates this.  Fedora
>  > Infrastructure could easily roll out such a service then, independent
>  > of MirrorManager.
>  
>  We could look at this. Would you folks be willing to repost the below
>  on the infrastructure list and we could start a discussion there? 
>  https://admin.fedoraproject.org/mailman/listinfo/infrastructure 
Absolutely,
reposting. I think this list is the right place to discuss
such things. And I just wonder -- anybody thinks this could be deployed
before the F19 is released?

>  
>  I don't see mod_geoip2 packaged yet, just mod_geoip. 
>  
>  kevin
>  --
>  > 
>  > --
>  > Matt Domsch
>  > Technology Strategist
>  > Dell | Office of the CTO
>  > 
>  > 
>  > 
>  > -----Original Message-----
>  > From: Martin Kolman [mailto:[e-mail]] 
>  > Sent: Tuesday, April 30, 2013 7:24 AM
>  > To: mdomsch(a)fedoraproject.org
>  > Cc: vpodzime(a)redhat.com; dcantrel(a)redhat.com
>  > Subject: MirrorManager GEO IP API
>  > 
>  > Hi,
>  > we've recently added GeoIP support to Anaconda, so that it can
>  > automatically preset the language and timezone for users that are
>  > online during the installation.
>  > 
>  > We are currently using the mirror manager API, as it is part of the
>  > Fedora infrastructure so users installing fedora are not calling some
>  > third-party service and leaking their public addresses all over.
>  > 
>  > Currently, we basically just use the mirror API like this:
>  > 
>  > https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-19&arch=i386
>  > 
>  > And use the first country code. As we don't really need all the other
>  > data & only care about GeoIP location data without the closest-mirror
>  > tweaks MirrorManager does, we wanted to ask - would it be possible to
>  > add some simple API just for GeoIP ?
>  > 
>  > Basically, just an API, that returns the most probable country code
>  > for the caller, without the closest mirror tweaks. I think it should
>  > also result in less strain on the servers than calling the full API.
>  > 
>  > We are even willing to supply patches adding this functionality. :)
>  > 
>  > Best wishes
>  > Martin Kolman
>  > from the Anaconda team
>  > 
>   
-- 
Vratislav Podzimek

Anaconda Rider | Red Hat, Inc. | Brno - Czech Republic

MirrorManager GEO IP API

[Kevin Fenzi]

On Mon, 06 May 2013 14:03:41 +0200
Vratislav Podzimek <vpodzime(a)redhat.com&gt; wrote:

>  On Thu, 2013-05-02 at 11:07 -0600, Kevin Fenzi wrote:
>  > On Tue, 30 Apr 2013 07:56:31 -0500
>  > <Matt_Domsch(a)Dell.com&gt; wrote:
>  > 
>  > > I think it would work best to use a dedicated Apache module, such
>  > > as http://dev.maxmind.com/geoip/mod_geoip2  rather than add
>  > > another interface into MirrorManager which otherwise duplicates
>  > > this.  Fedora Infrastructure could easily roll out such a service
>  > > then, independent of MirrorManager.
>  > 
>  > We could look at this. Would you folks be willing to repost the
>  > below on the infrastructure list and we could start a discussion
>  > there?
>  > https://admin.fedoraproject.org/mailman/listinfo/infrastructure
>  Absolutely, reposting. I think this list is the right place to discuss
>  such things. And I just wonder -- anybody thinks this could be
>  deployed before the F19 is released? 
It's possible. 

First step it making sure the needed parts are packaged up. 

kevin

MirrorManager GEO IP API

[Matt Domsch]

https://github.com/mdomsch/geoip-city-wsgi
now has the decent start of a trivial lookup. It reads the IP address from the incoming
connection, and responds with the JSON-formatted result from the GeoIP City lookup, which
includes timezones.  Plug this into an apache web server and you're good to go.   It
doesn't do IPv6 though - the python library doesn't support GeoIP City IPv6
lookups.

--
Matt Domsch
Technology Strategist
Dell | Office of the CTO



-----Original Message-----
From: Kevin Fenzi [mailto:[e-mail]] 
Sent: Thursday, May 09, 2013 10:35 AM
To: Vratislav Podzimek
Cc: Domsch, Matt; mkolman(a)redhat.com; mdomsch(a)fedoraproject.org; dcantrel(a)redhat.com;
infrastructure(a)lists.fedoraproject.org
Subject: Re: MirrorManager GEO IP API

On Mon, 06 May 2013 14:03:41 +0200
Vratislav Podzimek <vpodzime(a)redhat.com&gt; wrote:

>  On Thu, 2013-05-02 at 11:07 -0600, Kevin Fenzi wrote:
>  > On Tue, 30 Apr 2013 07:56:31 -0500
>  > <Matt_Domsch(a)Dell.com&gt; wrote:
>  > 
>  > > I think it would work best to use a dedicated Apache module, such 
>  > > as http://dev.maxmind.com/geoip/mod_geoip2  rather than add 
>  > > another interface into MirrorManager which otherwise duplicates 
>  > > this.  Fedora Infrastructure could easily roll out such a service 
>  > > then, independent of MirrorManager.
>  > 
>  > We could look at this. Would you folks be willing to repost the 
>  > below on the infrastructure list and we could start a discussion 
>  > there?
>  > https://admin.fedoraproject.org/mailman/listinfo/infrastructure
>  Absolutely, reposting. I think this list is the right place to discuss 
>  such things. And I just wonder -- anybody thinks this could be 
>  deployed before the F19 is released? 
It's possible. 

First step it making sure the needed parts are packaged up. 

kevin

MirrorManager GEO IP API

[Kevin Fenzi]

On Thu, 9 May 2013 11:50:31 -0500
<Matt_Domsch(a)Dell.com&gt; wrote:

>  https://github.com/mdomsch/geoip-city-wsgi
>  now has the decent start of a trivial lookup. It reads the IP address
>  from the incoming connection, and responds with the JSON-formatted
>  result from the GeoIP City lookup, which includes timezones.  Plug
>  this into an apache web server and you're good to go.   It doesn't do
>  IPv6 though - the python library doesn't support GeoIP City IPv6
>  lookups. 
Cool. ;) 

So, a dumb question here... 

Have you looked at using geoclue instead? 

http://www.freedesktop.org/wiki/Software/GeoClue

Dunno if it works too well or would meet your needs, but I thought I
would mention it before we go too far down the road to making our own
service. 

kevin

MirrorManager GEO IP API

[Bruno Wolff III]

On Thu, May 09, 2013 at 11:14:52 -0600,
   Kevin Fenzi <kevin(a)scrye.com&gt; wrote:
> On Thu, 9 May 2013 11:50:31 -0500
>
> Dunno if it works too well or would meet your needs, but I thought I
> would mention it before we go too far down the road to making our own
> service. 
Aren't there privacy concerns about doing IP lookups during installs?
Particularly to third parties.

MirrorManager GEO IP API

[Vratislav Podzimek]

On Thu, 2013-05-09 at 13:04 -0500, Bruno Wolff III wrote:
>  On Thu, May 09, 2013 at 11:14:52 -0600,
>     Kevin Fenzi <kevin(a)scrye.com&gt; wrote:
>  >On Thu, 9 May 2013 11:50:31 -0500
>  >
>  >Dunno if it works too well or would meet your needs, but I thought I
>  >would mention it before we go too far down the road to making our own
>  >service.
>  
>  Aren't there privacy concerns about doing IP lookups during installs?
>  Particularly to third parties. 
That's why we try to deploy and use the solution
in the Fedora
infrastructure.

-- 
Vratislav Podzimek

Anaconda Rider | Red Hat, Inc. | Brno - Czech Republic