adding geoip module

[alireza-moradi]

one of the best intermediate modules of ipfixcol was geoip module, would you please add it again?
and is it possible to run ipfixcol2 in cluster for collecting huge number of flows( 300k flowsets per second)

[Lukas955]

Hi,
yes, we would like to add intermediate plugins for GeoIP and ASN enrichment in the future. Nevertheless, since our focus is now on flow filtration, profiling, runtime reconfiguration and ability to read flows from files, it will not be ready soon.

Regarding to the second question, there is not a simple answer since I don't know which plugins do you want to use and how do you want to deploy the collector in a cluster environment. Nevertheless, even a single instance of the collector should be able to store > 1 mil. flow/s to file storage (e.g. IPFIX, FDS or lnfstore outputs) or > 250k flow/s in JSON to Kafka cluster. Moreover, there are some tricks that can even improve throughput such as distribution of processing to multiple output plugins or running multiple instances of the collector, where each collector receives flow records from a part of exporters.