Hi Lukas,

Thanks for your reply.

I have already tried http://nginx.org/en/docs/http/ngx_http_geoip_module.html#geoip_proxy

But this needs a list of subnets / networks to be whitelisted first as a trusted source. I do not (Can not) have a list of such networks as they can be intermediate proxy of any company. Eg : Google chrome on smartphone uses Google compression proxy in between before reaching the actual server where website is hosted. Opera mini also does the same and similarly don't know who all does it. So I can not have a list of all trusted networks.

I've also come across an issue where someone sitting behind a proxy. (Eg: Squid on local network) and browse internet then the first IP from left is LAN IP (Private network address) and then the public IP follows. Here GeoIP country detection fails.

Eg : 10.0.0.50, <Some Public IP> - - [12/Jun/2014:17:09:28 +0530] "GET / HTTP/1.1" 200 50675

I need a way where I can tell nginx that it should do GeoIP on the First Public IP from left. Currently due to private address at the first place GeoIP fails and country is not detected.

Do suggest what can be done.

Regards,
Keyur