Re: [Sks-devel] simple DoS against SKS's HKP interface :/

[Phil Pennock]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

On 2012-03-19 at 21:11 +0100, Kristian Fiskerstrand wrote:
> Here you go!
> 
> Added ha.pool. The HTTP Server code is available at e.g.
> http://sks-keyservers.net/status/info/keys.kfwebs.net . Atm I'm only
> including nginx servers in the subset.
> 
> ;; ANSWER SECTION:
> ha.pool.sks-keyservers.net. 28800 IN    A       213.161.224.2
> ha.pool.sks-keyservers.net. 28800 IN    A       217.197.135.103
> ha.pool.sks-keyservers.net. 28800 IN    A       209.234.253.170

I hadn't said, but: neat, thanks.  :-)

Separately: it appears that the pool only holds IPv4 addresses, not IPv6
addresses.  Is this intentional?

(I checked back a day after setting up nginx and I see my machine
listed, but only the IPv4 address).


As an aside to the list: I had been planning on taking a close look at
nginx anyway and DKG's post with his sample config was the kick in the
butt I needed to nudge me to get around to doing so.  My server also has
a WSGI script (my spider tool) so there was a bit more work involved in
migration.  I wrote up my experiences at:
  
http://bridge.grumpy-troll.org/2012/03/porting-python-wsgi-app-to-nginxuwsgi.html
which might be of interest.  The SKS changes were the easy part.  :-D

- -Phil
-----BEGIN PGP SIGNATURE-----

iEUEAREDAAYFAk9psk8ACgkQQDBDFTkDY39gEwCfTshWdJArTeF6/zwznDWT25r2
AZQAliawUPF0gsqAdYAaWV0EsyjAJYU=
=mVr8
-----END PGP SIGNATURE-----