Deactivate home-calling (connection to internet)

ResponsibleUser · May 29, 2018, 11:01am

Hello,
Is there a way to deactivate the feature i.e. avoid the connection to the internet which Matomo try to establish (marketplace etc.). In our infrastructure are this kind of home-calling not possible/not allowed and now the Matomo installation is extremely slow since Matomo try to call home all the time.

Lukas · May 29, 2018, 11:29am

Hi,

You can do this in the config:

github.com/matomo-org/matomo

New setting to disable all outgoing http requests from a Piwik server

opened 10:23AM - 28 Sep 14 UTC

closed 01:51PM - 01 Aug 18 UTC

mattab

Enhancement c: Security c: Privacy c: Platform

The goal of this issue is to let Piwik admins easily disable all outgoing HTTP r…equests which makes Piwik much faster to load on a server that cannot access the Internet. ## Edit: feature is available, [click to see our FAQ](https://matomo.org/faq/troubleshooting/faq_16646/) Imagine the use case of an Intranet where the Piwik server cannot connect to the Internet. Piwik is slow to load as it tries to make requests and requests take a while to timeout. There are many companies including Piwik installing Piwik in such environments. Another good use case is a user that wants to increase privacy of her Piwik server and she can just enable this setting which makes sure the Piwik server does not contact anyone on the Internet. currently it's possible to disable some of the requests via settings as follows: ``` [General] enable_marketplace = 0 enable_auto_update = 0 enable_update_communication = 0 ``` Proposed steps - New setting `enable_internet_features` or similar - this setting is the equivalent of setting other `enable_*` flags as above - when setting is set to 0 then disable the SEO widget (since it uses many web services) - check other uses of Http in piwik in case we missed any Ideally: disabling phoning home and other outgoing HTTP should be one setting away for Piwik users.

UPDATE: Sorry, I didn’t read the linked pull request properly. Thanks to this all of these settings have been merged and completed into

enable_internet_features = 0

ResponsibleUser · May 29, 2018, 12:10pm

Great! Thank you for the quick reply!

ResponsibleUser · May 29, 2018, 2:05pm

Sadly the solution is not working.
Added the lines to cinfig.php

enable_marketplace = 0
enable_auto_update = 0
enable_update_communication = 0

don’t prevent Matomo to try the home call.
It’s still try to call: 185.31.40.177 (piwik.alwaysdata.net).
The problem is if we give Matomo a firewall permission: if the IP is changing, we need to change permission again and again.

EDIT: deactivating the marketplace plugin in the admin interface helped.

Lukas · May 30, 2018, 4:46pm

Hi @ResponsibleUser,

Sorry, I didn’t read the linked pull request properly. Thanks to this all of these settings have been merged and completed into

enable_internet_features = 0

ResponsibleUser · June 1, 2018, 10:37am

Thank you!

This setting is working!

Just to your attention:
It may cause some problems with Heatmap-Recording. I’m really not sure, maybe this only appears in the system-check panel:

We couldn’t check if ‘https://xxxxxx/piwik/plugins/HeatmapSessionRecording/configs.php?idsite=xxxxx&trackerid=xxxx&url=http%3A%2F%2Ftest.test%2F’ is accessible because the internet connection is disabled on this Matomo.

However: the given URL is available in the browser!

Thank you again for your effort!

Lukas · June 1, 2018, 10:44am

Hi,

The Heatmap-Recording requires visitors to be able to visit https://matomo.example/piwik/plugins/HeatmapSessionRecording/configs.php. If your heatmaps are showing up fine, it’s pretty sure that this is working fine.

To detect cases where this doesn’t work, the system-check tries to request this URL.

As you have now disabled that Matomo fetches HTTP resources, this feature has also been disabled.

But if the configs.php is configured correctly for you (which it is if you can access it), you don’t need this automated check.