What are the current ip addresses for nominatim.openstreetmap.org and amsterdam.nominatim.openstreetmap.org for our firewall rules. Thank you. asked 22 Jun '20, 21:48 Radio_Guy |
The IP addresses change regularly, so it is unwise to put any IP directly into your firewall. Many firewalls accept hostnames (like nominatim.openstreetmap.org) and so you should use that instead. If you firewall only accepts IP addresses, then you should automatically update it by looking up the current IP addresses (via DNS), and updating your firewall rules appropriately. I would suggest doing this every few minutes - the DNS TTL will give you an indication of how long you should cache the IP address. (Of course, this is the entire point of DNS in the first place). answered 23 Jun '20, 08:18 Andy Allan |
In addition to Andy's direct answer, if you find yourself having to go through an outbound firewall to get to OSM's instance of Nominatim it's perhaps worth setting up your own instance of Nominatim inside your network. OpenStreetMap isn't a "map service" in the same way that other providers are; the data's free (within our licensing rules) and the software used to process it is mostly free too. If you ran your own service you wouldn't need to be concerned about people outside your network knowing what nominatim calls you were making. answered 23 Jun '20, 15:05 SomeoneElse ♦ |