Re: [Sks-devel] Mass drop from pool

[Kristian Fiskerstrand]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Matthew Palmer wrote, On 04/19/2011 10:42 AM:
> On Tue, Apr 19, 2011 at 09:10:43AM +0200, Gabor Kiss wrote:
>>> Just noticed virtually all of us have dropped from the pool for having >500
>>> missing keys. Not sure what is going on but have restarted my processes in
> 
> Wow, I'm still in the pool.  I'm a bit surprised at that.  Still no
> appreciable load on the server, which is nice.
> 
>> Kristian,
>> Could you modify the selection algorithm? E.g. if number of pool
>> members drops below 50% of normal level the check should be
>> done once an hour instead of once a day.
> 
> I would recommend making the algorithm less tied to one particular peer
> (which, after all, should have no reason for being in any way special from
> the point of view of clients), and instead use a statistic across the pool;
> something like "any peer which is more than N standard deviations from the
> mean number of keys across all candidate servers gets dropped".  (N could be
> fractional, if appropriate).

I'll look into some other way to handle this, but it comes down to a
balancing act of complexity vs usability. In any case I don't have too
much free time to look at it atm.
> 
> While we're on the topic, is there any analysis of "well-connectedness" in
> the keyserver pool?  That is, if a server was only gossiping with one peer,
> perhaps even on the end of a long chain (say A<->B<->C<->D<->rest of pool),
> is there anything to deprioritise it or otherwise get it out of the pool? 
> Especially if any of B/C/D are out of the pool or go offline...  that could
> suck.

You could try to make sense of
http://storage.sks-keyservers.net/map.png :) It is generated using
graphviz, so if you want the original .dot file to try to make it more
usable, feel free to let me know.

- -- 
- ----------------------------
Kristian Fiskerstrand
http://www.kfwebs.net
- ----------------------------
Nosce te ipsum!
Know thyself!
- ----------------------------
http://www.secure-my-email.com
http://www.secure-my-internet.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
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=V40W
-----END PGP SIGNATURE-----