Skip to content

geoip2: NGINX GeoIP2 module


CentOS/RHEL 6, 7, 8 or Amazon Linux 2

bash yum -y install yum -y install nginx-module-geoip2

Enable the module by adding the following at the top of /etc/nginx/nginx.conf:

nginx load_module modules/;

This document describes nginx-module-geoip2 v3.3 released on Oct 29 2019.

ngx_http_geoip2_module - creates variables with values from the maxmind geoip2 databases based on the client IP (default) or from a specific variable (supports both IPv4 and IPv6)

The module now supports nginx streams and can be used in the same way the http module can be used.

Download Maxmind GeoLite2 Database (optional)

The free GeoLite2 databases are available from Maxminds website

GeoLite2 City GeoLite2 Country

Example Usage:

```nginx http { ... geoip2 /etc/maxmind-country.mmdb { auto_reload 5m; $geoip2_metadata_country_build metadata build_epoch; $geoip2_data_country_code default=US source=$variable_with_ip country iso_code; $geoip2_data_country_name country names en; }

geoip2 /etc/maxmind-city.mmdb {
    $geoip2_data_city_name default=London city names en;

fastcgi_param COUNTRY_CODE $geoip2_data_country_code;
fastcgi_param COUNTRY_NAME $geoip2_data_country_name;
fastcgi_param CITY_NAME    $geoip2_data_city_name;


stream { ... geoip2 /etc/maxmind-country.mmdb { $geoip2_data_country_code default=US source=$remote_addr country iso_code; } ... } ```


Retrieve metadata regarding the geoip database. $variable_name metadata <field> Available fields: - build_epoch: the build timestamp of the maxmind database. - last_check: the last time the database was checked for changes (when using auto_reload) - last_change: the last time the database was reloaded (when using auto_reload)

Autoreload (default: disabled):

Enabling auto reload will have nginx check the modification time of the database at the specified interval and reload it if it has changed. auto_reload <interval>


$variable_name [default=<value] [source=$variable_with_ip] path ... If default is not specified, the variable will be empty if not found.

If source is not specified, $remote_addr will be used to perform the lookup.

To find the path of the data you want (eg: country names en), use the mmdblookup tool:

``` $ mmdblookup --file /usr/share/GeoIP/GeoIP2-Country.mmdb --ip

{ "country": { "geoname_id": 6252001 "iso_code": "US" "names": { "de": "USA" "en": "United States" } } }

$ mmdblookup --file /usr/share/GeoIP/GeoIP2-Country.mmdb --ip country names en

"United States" ```

This translates to:

$country_name "default=United States" source=$remote_addr country names en


You may find additional configuration tips and documentation for this module in the GitHub repository for nginx-module-geoip2.

Back to top