How do I block visitors by varnish on centos, using nginx as backend?

Question

I want to block visitors from some country, by country code, not by maintain a lot of ip ranges. I can do it using only nginx, but i've just configured varnish to frontend, and I have not found any solutions yet. I'm using centos 6.4 x64.

Thanks for any advice

Answer 1

Use some GeoIP module for Varnish. geoip-vmod for example.

Answer 2

If you install https://github.com/iwebhosting/varnish-geoip then you can do it in vcl_recv like this:

sub vcl_recv {
  if (req.http.X-Geo-IP ~ "IE|FR|US") {
    error 503 "Your country has been blocked.";
  }
}