You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
GeoIP processor: Option to enable private IP address lookupsΒ #6079
Is your feature request related to a problem? Please describe.
Currently, the GeoIP processor in Data Prepper ignores private IP addresses. This makes it difficult to enrich internal network traffic (e.g., NetFlow or audit logs) with metadata from an internal IP Address Management (IPAM) system, such as office, datacenter, or department information
Describe the solution you'd like
Introduce a configuration option in the geoip_service that allows processing of private IP addresses. For example:
class GeoInetAddress {
static Optional<InetAddress> usableInetFromString(final String ipAddress) {
final InetAddress address;
try {
address = InetAddresses.forString(ipAddress);
} catch (final IllegalArgumentException e) {
return Optional.empty();
}
if (isPublicIpAddress(address) OR LOOKUP_PRIVATE_ADDRESS)
return Optional.of(address);
return Optional.empty();
}
Describe alternatives you've considered (Optional)
An alternative is to use the add_entries processor in combination with add_when and cidrContains()
However, this approach is significantly slower and becomes impractical with large numbers of CIDR ranges, especially for NetFlow enrichment.
As a further enhancement, it would be useful to allow reading custom fields from MMDB files (not only geo-related data). This would make it possible to attach metadata such as department or business unit information to a given CIDR block.
@dlvenable I'll be working on the lookup_private_addresses part. The custom MMDB field lookup mentioned in the issue is a separate enhancement and can be tracked in its own issue.
Activity
graytaylor0 commentedon Sep 16, 2025
Thanks for creating this issue! Would you be interested in creating a pull request for this enhancement?
srikanthpadakanti commentedon Apr 5, 2026
@graytaylor0 Please assign this to me. Thanks
dlvenable commentedon Apr 6, 2026
@srikanthpadakanti , Thanks for working this. Are you going to work on the
lookup_private_addressespart or the custom MMDB lookup part?srikanthpadakanti commentedon Apr 6, 2026
@dlvenable I'll be working on the
lookup_private_addressespart. The custom MMDB field lookup mentioned in the issue is a separate enhancement and can be tracked in its own issue.