Re: [Sks-devel] sks responding extremely slowly if at all

[Daniel Kahn Gillmor]

On 02/25/2013 03:21 PM, David Benfell wrote:
> If I'm reading this right, it's still running, but these timeouts are
> ridiculous:
> 
> graton% gpg --recv-key "2512E3C7"
> gpg: requesting key 2512E3C7 from hkp server disunitedstates.com
> gpg: keyserver timed out
> gpg: keyserver receive failed: keyserver error
> 
> What should I do?

are you running your keyserver behind an HTTP proxy?  It's a known flaw
in SKS that a single slow client can prevent any other client from
accessing the service.  using a reverse proxy directly in front of the
actual keyserver is a "best practice" approach to work around this problem:

https://bitbucket.org/skskeyserver/sks-keyserver/wiki/Peering#!http-performance

hth,

        --dkg

signature.asc
Description: OpenPGP digital signature