sks-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Sks-devel] pgp.mit.edu upgraded to SKS 1.1.4


From: Jonathon Weiss
Subject: Re: [Sks-devel] pgp.mit.edu upgraded to SKS 1.1.4
Date: Thu, 12 Dec 2013 17:11:22 -0500


Kristian,

Thanks for the review.  I considered the possibility of a load-balanced
pair of key servers prior to this upgrade, but decided that the
resources for that are not (yet) justified.

I actually intentionally left the ProxyVia setting off until the new
machine had a chance to burn in.  I expect I'll add it in a week or so.
That raises a question though.  What order of magnitude of additional
queries should I expect upon joining the pool.

        Jonathon


Kristian Fiskerstrand <address@hidden> wrote:

> On 12/12/2013 01:45 AM, Jonathon Weiss wrote:
> > 
> > Hello All,
> 
> Hi Jonathon,
> 
> > 
> > I know there are people out there who pay more attention to
> > pgp.mit.edu than to the average keyserver.  So I wanted to let
> > folks know that pgp.mit.edu has been upgraded to SKS 1.1.4.  Also
> > of note is that it now allows queries on either port 80 or 11371
> > (and yes Apache is fronting both ports), so users behind
> > restrictive firewalls can now access the system.  Please let us
> > know if you detect any problems.
> > 
> 
> Thanks for upgrading, it is indeed a server that experience a higher
> load than most, so a good test case for a lot of things[a].
> 
> In any case, the setup looks good with the exception of no Via header
> being reported despite being behind apache, and as there is no rewrite
> of Server: headers, my pool crawler doesn't detect the reverse proxy.
> If you want this being detected, please set ProxyVia; there is an
> Apache example config at [0].
> 
> 
> Endnotes:
> [a] Depending on load it might even make sense to load-balance it with
> multiple instances?
> 
> References:
> [0] https://bitbucket.org/skskeyserver/sks-keyserver/wiki/Peering
> 
> 
> -- 
> ----------------------------
> Kristian Fiskerstrand
> Blog: http://blog.sumptuouscapital.com
> Twitter: @krifisk
> ----------------------------
> Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
> fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
> ----------------------------
> Bene diagnoscitur, bene curatur
> Something that is well diagnosed can be cured well



reply via email to

[Prev in Thread] Current Thread [Next in Thread]