[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Sks-devel] pgp.mit.edu upgraded to SKS 1.1.4
From: |
Jonathon Weiss |
Subject: |
Re: [Sks-devel] pgp.mit.edu upgraded to SKS 1.1.4 |
Date: |
Thu, 12 Dec 2013 17:11:22 -0500 |
Kristian,
Thanks for the review. I considered the possibility of a load-balanced
pair of key servers prior to this upgrade, but decided that the
resources for that are not (yet) justified.
I actually intentionally left the ProxyVia setting off until the new
machine had a chance to burn in. I expect I'll add it in a week or so.
That raises a question though. What order of magnitude of additional
queries should I expect upon joining the pool.
Jonathon
Kristian Fiskerstrand <address@hidden> wrote:
> On 12/12/2013 01:45 AM, Jonathon Weiss wrote:
> >
> > Hello All,
>
> Hi Jonathon,
>
> >
> > I know there are people out there who pay more attention to
> > pgp.mit.edu than to the average keyserver. So I wanted to let
> > folks know that pgp.mit.edu has been upgraded to SKS 1.1.4. Also
> > of note is that it now allows queries on either port 80 or 11371
> > (and yes Apache is fronting both ports), so users behind
> > restrictive firewalls can now access the system. Please let us
> > know if you detect any problems.
> >
>
> Thanks for upgrading, it is indeed a server that experience a higher
> load than most, so a good test case for a lot of things[a].
>
> In any case, the setup looks good with the exception of no Via header
> being reported despite being behind apache, and as there is no rewrite
> of Server: headers, my pool crawler doesn't detect the reverse proxy.
> If you want this being detected, please set ProxyVia; there is an
> Apache example config at [0].
>
>
> Endnotes:
> [a] Depending on load it might even make sense to load-balance it with
> multiple instances?
>
> References:
> [0] https://bitbucket.org/skskeyserver/sks-keyserver/wiki/Peering
>
>
> --
> ----------------------------
> Kristian Fiskerstrand
> Blog: http://blog.sumptuouscapital.com
> Twitter: @krifisk
> ----------------------------
> Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
> fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
> ----------------------------
> Bene diagnoscitur, bene curatur
> Something that is well diagnosed can be cured well