Re: [Sks-devel] Keyserver Network Down?

[Kristian Fiskerstrand]

On 06/19/2018 11:17 PM, Kristian Fiskerstrand wrote:
> On 06/19/2018 11:09 PM, Kristian Fiskerstrand wrote:
>> On 06/19/2018 10:53 PM, Matthew Walster wrote:
>>> The keyserver status page seems broken also:
>>> https://sks-keyservers.net/status/
>>
>> This was an intermittent failure, should be back up now.. Needed to
>> shift around some primaries to bootstrap the crawler.
>>
> 
> That said, looks to be very high activity towards my cluster atm, which
> was why it timed out on my own server initially during last search,
> seems more than 37k hosts requesting keyblocks just from my server
> today, so might have to spin up a couple more nodes in the cluster.
> 

Seems to be a very high request for mongodb release key, so forcing
caching on the front-end helps relaxing SKS quite a bit, see

https://www.nginx.com/blog/nginx-caching-guide/
https://www.digitalocean.com/community/tutorials/understanding-nginx-http-proxying-load-balancing-buffering-and-caching

some hints
   proxy_cache backcache;
   proxy_ignore_headers Cache-Control "Expires";
   proxy_cache_valid any 30m;


-- 
----------------------------
Kristian Fiskerstrand
Blog: https://blog.sumptuouscapital.com
Twitter: @krifisk
----------------------------
Public OpenPGP keyblock at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
----------------------------
Fabricando fit faber
Practice makes perfect

signature.asc
Description: OpenPGP digital signature