I know cloudlfare and other cloud providers often provide geoblocking features if you host with them.

Does anybody know of any similar foss packages for us self-hosters?

I know I don’t have any need for somebody outside of my country to access my server, so geoblocking IPs would be a great security feature.

  • terribleplan
    link
    fedilink
    English
    4
    edit-2
    1 year ago

    It depends on what specific thing you want to add geoblocking to, but often something like the MaxMind GeoIP database, which then can feed into a firewall to pre-emptively geo-block at a connection level, or as part of e.g. nginx geolocating the IP a of the connecting IP then making the blocking decision at request time.

    There’s a project that works with Traefik’s forward-auth middleware to do this, which is probably how I would go about it if I wanted it at an HTTP level.

    • chandz05
      link
      English
      11 year ago

      Yep SWAG reverse proxy (which uses ngjnx) can use Maxmind for geoblocking pretty easily