아파치 GeoIP 설정 및 적용(centos7x)

설치환경
Centos7.7
apache-2.4.41

csv파일 다운로드(가입해야 다운가능)
https://www.maxmind.com/en/accounts/current/people/current


csv->dat 변환

# yum -y install python-ipaddr.noarch

# git clone https://github.com/sherpya/geolite2legacy.git

# ./geolite2legacy.py -i ../GeoLite2-Country-CSV_20200114.zip -f geoname2fips.csv -o GeoIP.dat

참고 : https://github.com/sherpya/geolite2legacy


geoip C라이브러리 설치

# git clone https://github.com/maxmind/geoip-api-c.git
 
# cd geoip-api-c
 
# ./bootstrap
 
# ./configure --prefix=/usr/local/GeoIP
 
# make && make install

mod_geoip2 모듈 설치

# wget https://github.com/maxmind/geoip-api-mod_geoip2/archive/1.2.10.tar.gz
 
# /usr/local/apache-2.4.41/bin/apxs -i -a \
-L /usr/local/GeoIP/lib \
-I /usr/local/GeoIP/include \
-l GeoIP \
-c ./mod_geoip.c 

httpd.conf설정

<IfModule geoip_module>
 GeoIPEnable On
 GeoIPDBFile /usr/share/GeoIP/GeoIP.dat
</IfModule>

아파치 로그포맷설정

LogFormat "%h %l %u %t \"%r\" %>s %b \"%i\" \"%i\" %e" combined

한국만 접속허용할 경우

<Directory "/wwwroot">
SetEnvIf GEOIP_COUNTRY_CODE KR AllowCountry
Order deny,allow
Deny from all
Allow from env=AllowCountry
</Directory>