Hello,
I'm the mirror of some projects and I provide accessible stats with goaccess to the dev.
However I wish to hide the visitors IPs for privacy reason. Especially when we start to touch projects like Tor, Tails, etc..
I'm using a script at the moment to replace the IPs with x.x.x.x, but I guess it could be a good feature for goaccess directly.
May be it exists already but I haven't seen it.
Thanks for your ideas there.
Great question. Currently it doesn't have this feature. I can look into it, shouldn't be too bad to implement this. Thanks for bring this up.
Awesome :)
I hope this might provide more context to a request like this:
IP addresses are often seen as personal data (especially when related to a website or service), additionally referral urls can contain sensitive information too. Our wish is to publish the goacces statistics on a website for the world to see. We'd like to publish all panels of course, to show of all awesome stats.
Currently our quick workaround would be to filter the output. This solution is not future proof, as ip-addresses etc might pop up elsewhere in the next update.
Ideally we would see a feature that transforms sensitive information into unique but meaningless (non-reversable) hashes or removed all-together. Ideally this would be a single flag you set to all relevant panels ("--private"). When thinking of privacy by design, this would be default behavior, and the option "--unfiltered" would be applied to see everything as is.
It might be enough to "anonymize" IP address by truncating the least-significant 16 bits (in IPv4) or 64 (or perhaps 96) bits in IPv6. That's probably still enough to report country, but not uniquely identify anyone.
Should IP addresses be anonymized at the output level or at the storage level? If it's done at the the output level, all visitors stats will continue to show accurate numbers. However, if it's done at the storage level, then unique visitors will probably not be completely accurate, e.g.,
192.168.1.100 => 192.168.1.0 == 192.168.1.120 => 192.168.1.0
The ability to anonymize IPv4/6 addresses has been added. This is done at the the output level so all visitors stats will continue to show accurate numbers. e.g.,
192.168.1.100 => 192.168.1.0
BTW, feel free to build from development to test this out, otherwise it will be pushed out in the upcoming release.
Any idea when this upcoming release might be?
@BobVul Due by November 23, 2018
Most helpful comment
Great question. Currently it doesn't have this feature. I can look into it, shouldn't be too bad to implement this. Thanks for bring this up.