11.1.3 GeoIP filtering

GeoIP Configuration for Gateways

As part of the Communication Gateway setup, once the component has been configured, it can be enhanced with geographic IP detection (GeoIP).

GeoIP is a tool used to determine the geographic location of network components. This allows for faster and more efficient connections between nodes by routing traffic based on proximity.

Enabling GeoIP in the Main Gateway

To enable GeoIP in the main Gateway, edit the settings.ini file located at:

C:\ProgramData\Cybele Software\Thinfinity\Workspace\DB\settings.ini

Open this file with a text editor running as administrator. In the [Broker] section (note: this label refers to Communication Gateway settings), configure the following parameters:

[Broker]
PublicGatewayURL=
GatewayURL_0=http://Main_Gateway
CommGatewayUrl_0=http://CommGateway_0
CommGatewayUrl_1=http://CommGateway_1

Then, locate the [Protection] section and enable the GeoIpEnabled flag:

[Protection]
GeoIpEnabled=true

Finally, save and close the file.

Creating a GeoIP Filter JSON File

In the root directory of your Main Gateway installation:

C:\ProgramData\Cybele Software\Thinfinity\Workspace\DB\

Create a file named geoip-filter.json and add the following structure:

{
  "FilterType": 2,
  "FilterList": [],
  "WhiteList": [],
  "Help": {
    "FilterType": "0: Disabled, 1: Include, 2: Exclude",
    "FilterList": "[\"xxyy\",\"xxyy\",...] where xx is the continent code and yy is the country code (use \"????\" for all continents or \"xx??\" to target an entire continent). Continent Codes: AF Africa, AN Antarctica, AS Asia, EU Europe, NA North America, OC Oceania, SA South America",
    "WhiteList": "Contains entries like {\"Address\": \"\",\"Reason\": \"\"} — if found, the filter will return FilterType: 1"
  }
}

Perform the following configurations:

• FilterType: Set to 2 for exclusion filtering.

• FilterList: Add continent and country codes you want to block.

• WhiteList: Leave empty for now or configure exceptions as needed.