Re: [Sks-devel] Quickie Script to Check your status in the pool

[Kristian Fiskerstrand]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 10/06/2013 12:49 AM, Daniel Kahn Gillmor wrote:
> On 10/05/2013 05:30 PM, Todd Lyons wrote:
>> Hey all, if you're like me, you are curious what pools you might
>> be serving data for at any given point in time. The status page
>> at http://www.sks-keyservers.net/status/ tells you what it thinks
>> of your keyserver, but it doesn't tell you all of the pools
>> you're in.
> 
> Cool, thanks for publishing this, Todd.
> 
> I bet Kristian would be willing to add this information to the
> reporting scripts directly if we ask nicely :)
> 
> Kristian, could you adjust at least the json view so that it
> returns a sorted array of strings that indicate the canonical names
> of the pools the machine is currently part of?


It depends on the definition of "currently". For all pools except the
geographical pools (EU,NA,OC; the SA was only experimental and is now
deprecated) I indicate that it could potentially be part of the pool,
but do a random selection of the available servers whenever refreshing
the DNS zone data. It is therefore very likely that two persons on
different networks requesting the zone can get different servers
included if there is some form of DNS caching involved.

The geo pools are different, for the json view I already indicate the
SRV weight for these pools, but this is somewhat more deterministic as
I do an ordered sort and only include the best matches (indicated with
a green background in the status pages)

In many ways I think Todd is doing the right thing here and looking at
the actual DNS records (although note that you probably want to look
at the SOA record as well for when it was last updated, potentially I
update this every 10 minutes, although as of late I've reduced the
frequency somewhat)


- -- 
- ----------------------------
Kristian Fiskerstrand
Twitter: @krifisk
- ----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Dura necessitas
Necessity is harsh
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.1.0-beta252 (GNU/Linux)
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=V2tO
-----END PGP SIGNATURE-----