[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Sks-devel] Keyserver Network Down?
From: |
Kristian Fiskerstrand |
Subject: |
Re: [Sks-devel] Keyserver Network Down? |
Date: |
Wed, 20 Jun 2018 00:35:58 +0200 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 |
On 06/19/2018 11:17 PM, Kristian Fiskerstrand wrote:
> On 06/19/2018 11:09 PM, Kristian Fiskerstrand wrote:
>> On 06/19/2018 10:53 PM, Matthew Walster wrote:
>>> The keyserver status page seems broken also:
>>> https://sks-keyservers.net/status/
>>
>> This was an intermittent failure, should be back up now.. Needed to
>> shift around some primaries to bootstrap the crawler.
>>
>
> That said, looks to be very high activity towards my cluster atm, which
> was why it timed out on my own server initially during last search,
> seems more than 37k hosts requesting keyblocks just from my server
> today, so might have to spin up a couple more nodes in the cluster.
>
Seems to be a very high request for mongodb release key, so forcing
caching on the front-end helps relaxing SKS quite a bit, see
https://www.nginx.com/blog/nginx-caching-guide/
https://www.digitalocean.com/community/tutorials/understanding-nginx-http-proxying-load-balancing-buffering-and-caching
some hints
proxy_cache backcache;
proxy_ignore_headers Cache-Control "Expires";
proxy_cache_valid any 30m;
--
----------------------------
Kristian Fiskerstrand
Blog: https://blog.sumptuouscapital.com
Twitter: @krifisk
----------------------------
Public OpenPGP keyblock at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
----------------------------
Fabricando fit faber
Practice makes perfect
signature.asc
Description: OpenPGP digital signature