aws waf and reliability of geolocation of incoming request

0

From our application where user logs in we want to ensure that the request came from particular country. We tried GeoIP api 's and it is not accurate and yet times returns country that is not where exactly user logged in from.

I notice that WAF : https://repost.aws/knowledge-center/waf-allow-block-country-geolocation want to understand how reliable it is compared to other goiip providers.

1回答
2

Hi, based on WAF FAQ: https://aws.amazon.com/waf/faqs/

How accurate is your GeoIP database?

The accuracy of the IP Address to country lookup database varies 
by region. Based on recent tests, our overall accuracy for the IP 
address to country mapping is 99.8%. 

You also have to remember that some corporations have a global single internet access even if their branches are in multiple countries: all internet traffic originates from this single place and is seen as such on the internet even if staff from all over the work uses it.

Also, systems like Tor: https://en.wikipedia.org/wiki/Tor_(network) will "muddy the water"

So, think about all those possible circumventions when you implement geolocations-based rules.

Hope it helps!

Didier

profile pictureAWS
エキスパート
回答済み 10ヶ月前
profile picture
エキスパート
レビュー済み 10ヶ月前
profile picture
エキスパート
レビュー済み 10ヶ月前
  • Thank you for your prompt response. If we consider countries like Malaysia, Singapore, Brunei, and the Maldives, which are relatively small in size, is the geolocation accuracy still 99.8%? Has aws determined the specific accuracy level for each of these countries?

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ