Re: [Sks-devel] pgp.mit.edu upgraded to SKS 1.1.4

[Jonathon Weiss]

Just a quick followup that I've added the ProxyVia header, and pgp.mit.edu has 
been accepted into the pool(s).

        Jonathon



> Kristian,
> 
> Thanks for the review.  I considered the possibility of a load-balanced
> pair of key servers prior to this upgrade, but decided that the
> resources for that are not (yet) justified.
> 
> I actually intentionally left the ProxyVia setting off until the new
> machine had a chance to burn in.  I expect I'll add it in a week or so.
> That raises a question though.  What order of magnitude of additional
> queries should I expect upon joining the pool.
> 
>       Jonathon
> 
> 
> Kristian Fiskerstrand <address@hidden> wrote:
> 
> > On 12/12/2013 01:45 AM, Jonathon Weiss wrote:
> > > 
> > > Hello All,
> > 
> > Hi Jonathon,
> > 
> > > 
> > > I know there are people out there who pay more attention to
> > > pgp.mit.edu than to the average keyserver.  So I wanted to let
> > > folks know that pgp.mit.edu has been upgraded to SKS 1.1.4.  Also
> > > of note is that it now allows queries on either port 80 or 11371
> > > (and yes Apache is fronting both ports), so users behind
> > > restrictive firewalls can now access the system.  Please let us
> > > know if you detect any problems.
> > > 
> > 
> > Thanks for upgrading, it is indeed a server that experience a higher
> > load than most, so a good test case for a lot of things[a].
> > 
> > In any case, the setup looks good with the exception of no Via header
> > being reported despite being behind apache, and as there is no rewrite
> > of Server: headers, my pool crawler doesn't detect the reverse proxy.
> > If you want this being detected, please set ProxyVia; there is an
> > Apache example config at [0].
> > 
> > 
> > Endnotes:
> > [a] Depending on load it might even make sense to load-balance it with
> > multiple instances?
> > 
> > References:
> > [0] https://bitbucket.org/skskeyserver/sks-keyserver/wiki/Peering
> > 
> > 
> > -- 
> > ----------------------------
> > Kristian Fiskerstrand
> > Blog: http://blog.sumptuouscapital.com
> > Twitter: @krifisk
> > ----------------------------
> > Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
> > fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
> > ----------------------------
> > Bene diagnoscitur, bene curatur
> > Something that is well diagnosed can be cured well