using 2000+ ip prefixes in nginx geo module !!

[Maxim Dounin]

Hello!

On Thu, Jun 19, 2014 at 09:12:04PM +0100, Steve Wilson wrote:

> These 2 overlap
> 
> 110.93.192.0/24 <http://110.93.192.0/24> TW;
> 110.93.192.0/18 <http://110.93.192.0/18> TW;
> 
> The /24 is within the /18. In this instance you want to remove the /24.
> 
> It might be worth investigating if you've got any others that overlap. I
> think you can probably override with a different country code but using
> the same makes no sense.

For nginx, overlapping of CIDR blocks doesn't matter - it's 
correct and expected use case.  It may appear, e.g., if a more 
specific block has some additional properties in the original 
data, or if some intermediate block was present at some point, but 
later was removed.

Warning messages will only appear if exactly the same block is 
already present.  That is, the following will produce a warning:

    127.0.0.0/8   ZZ;
    127.0.0.0/8   ZZ;

But this will be fine:

    127.0.0.0/8   ZZ;
    127.0.0.0/24  ZZ;

Note well that the warning messages are just warning messages.  
Configuration is handled fine, duplicate blocks will be simply 
ignored.  The problem of the original question author is likely 
completely unrelated.

-- 
Maxim Dounin
http://nginx.org/