fix: handle MaxMind 429 and backoff

.env.example

@@ -15,3 +15,6 @@ PDB_INFO_TYPE=Educational/Research
 
 # minimum ASN entries for healthy /healthz
 MIN_ASN_COUNT=10
+
+# retry interval after a failed update (e.g., MaxMind 429)
+RETRY_SECONDS=3600

asn-updater/entrypoint.sh

@@ -2,12 +2,16 @@
 set -eu
 
 INTERVAL_SECONDS="${INTERVAL_SECONDS:-2592000}"
+RETRY_SECONDS="${RETRY_SECONDS:-3600}"
 echo "[start] updater interval=${INTERVAL_SECONDS}s out_dir=${OUT_DIR:-/data}"
 
 while true; do
   echo "[run] update now"
-  python /app/update.py
+  if python /app/update.py; then
     echo "[sleep] ${INTERVAL_SECONDS}s"
     sleep "${INTERVAL_SECONDS}"
+  else
+    echo "[warn] update failed; retry in ${RETRY_SECONDS}s"
+    sleep "${RETRY_SECONDS}"
+  fi
 done
-

asn-updater/update.py

@@ -29,6 +29,12 @@ def download_maxmind_mmdb() -> None:
     with tempfile.TemporaryDirectory() as td:
         tgz = os.path.join(td, "GeoLite2-ASN.tar.gz")
         r = requests.get(url, timeout=TIMEOUT)
+        if r.status_code == 429:
+            existing = os.path.join(OUT_DIR, "GeoLite2-ASN.mmdb")
+            if os.path.exists(existing):
+                print("[warn] MaxMind rate limited (429); keeping existing mmdb")
+                return
+            raise RuntimeError("MaxMind rate limited (429) and no existing mmdb")
         r.raise_for_status()
         with open(tgz, "wb") as f:
             f.write(r.content)