Re: [Sks-devel] Upcoming maintenance for sks.undergrid.net

[Jeremy T. Bouse]

        Maintenance went off without a hitch and cluster back online with new
IPv6 address as well. Currently still trying to get caught back up on
keys to be eligible to re-join pool.

        Speaking of which, the behavior I'm seeing in the logs leads me to
believe that for some reason the running SKS process losses all track of
authorized hosts from my membership file and begins to reject all
incoming attempts to gossip from peers. I actually went and spot checked
quite a few of the reject log entry hosts and confirmed that they should
have been authorized and in fact see gossip activity after restarting
SKS. Possible memory leak?

On 10/16/2014 11:48 PM, Jeremy T. Bouse wrote:
>       While sks.undergrid.net is out of the pool currently as it appears to
> keep falling behind the key count for days at a time and I haven't
> isolated the root cause I am going through moving the hosts within my
> provider to allow them to add IPv6 support.
> 
>       Be aware that if you're peering with me and have firewall rules set up
> with tight ingress control my IPv4 address will be changing as well as
> the addition of an IPv6 address.
> 
> On 09/28/2014 01:51 PM, Jeremy T. Bouse wrote:
>>      I am currently preparing to move my sks.undergrid.net cluster to
>> another facility within my provider network to enable IPv6 support which
>> I lost when I shutdown keyserver.undergrid.net. I'm working on things
>> currently as the cluster is outside of the pools do to falling behind on
>> keys. I'm still investigating the root cause of that but indicators so
>> far appear that it was simply unable to confirm gossip connections from
>> peers listed in it's membership file.
>>
>>      Regards,
>>      Jeremy T. Bouse
>>

signature.asc
Description: OpenPGP digital signature