[Sks-devel] SKS Performance oddity
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 I don't know what is going on here with my cluster but I have 3 of 4 nodes that absolutely perform as I would expect... They have 2 vCPU with 4GB RAM each along with an extra 50GB drive exclusively for SKS use under /var/lib/sks. The three behaving fine are my sks02, sks03 and sks04 secondary nodes. My primary node on the other hand is another story. First I tried increasing it from 2 vCPU/4GB RAM like the others to 2 vCPU/8GB RAM and then 4 vCPU/8GB RAM without it making any change. I then built out a new physical server with a quad-core Xeon 2.4GHz processor and 4GB RAM and a dedicated 3TB RAID5 array and I'm seeing the same problem. SKS is constantly pegging the CPU at 100% and eating up nearly all the memory whether it's running on a virtual or physical. server. Recon service is working and I'm ingesting keys from peers and peering with my internal cluster nodes but everytime it goes into recon mode the node starts failing to respond as the CPU and RAM spike which then leads to the node being dropped from the pool as the stats page can't be hit before it times out. I've been fighting with this for a several days now... Anyone else out there seeing this behavior or if not and have similar resourced servers care to share details to see if I'm missing something here. The particulars are that all nodes are Debian 9.8 (Stretch) 64-bit. Then only primary node handles running NGINX configured for load balancing the cluster. The only other daemons running across all nodes besides SKS are OpenSSH for remote access, SSSD for centralized authenication, Haveged for entropy and Postfix configured for smarthost relaying. -BEGIN PGP SIGNATURE- iQGzBAEBCgAdFiEEakJ0F+CHS9VzhSFg6lYpTv4TPXUFAlyDTX0ACgkQ6lYpTv4T PXUB0Qv/fRbDkGPes3eq3xDkv6MQHfVFLXuUNdjOtrgpvCwkiS8b340dDKmI5a+x NufUzvSHX4GjOc3Joxivc/N1rA7ENrwEX+2T/cwrE8iu+himuvAJkQtXp2qo2Dye 9CgzGKR/J0BO50tdmNCJLp6xuR4eY4ISBo0FeeGplipmZIv5BSqKcTcYWaFCNddr FLqk6gKT1yzVHb8aO4KzIyB9CqcJEBbTL/RTaJWslCewYcmikw6NBOc1dV/BoxBA uGXK3o48o3mo7LJj+sH8/U6F0Ffqnn/tbwIIe/dZSnyonTyP1ENAN2zBWgdzyiRK qp1/TDoFC6FuujJgJNKOSsPMNw9bVd5gXYUIIDIE9YK7SeCEP2us4TWS4LQJmuB9 7aidQ0rseyN9cSKrswUyWq7k3pM8iLnzx7D8BwW2uvO2SjKo+ALce5UtjyOhgg9v ECnxoKjeUTujle/0ZRyi5AbC3AfKi/CoREIJ98w+tAh7jdM5w34vYH8plekRGbFp 4bNo9Fyl =EdIY -END PGP SIGNATURE- ___ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel
Re: [Sks-devel] Data protection concern[Ref. RFA0751305]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Fri, 2019-03-08 at 15:15 +0100, Kristian Fiskerstrand wrote: > > and no further action will be taken from them. ..at this time. IANAL, but you should really talk to a lawyer to make sure that you (and your assets) are fully protected from future ICO or private action by claimant. Never, ever, ever put faith in the words of a lawyer of judicial agency that you haven't personally paid for advice. The system sucks, but that's how it works. - -Jim P. -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEECPbAhaBWEfiXj/kxdRlcPb+1fkUFAlyCma8ACgkQdRlcPb+1 fkUw4g//dg9vDItd3TY54yQd1Ghu6ePwlBd803AWvSqXAxjmxVcAT/Tas8D0KHen CM0PoZrPgF7w1GOPoMEULrdw4RZF+ZzssEH/CTetomqDB7yNVXhzz2LIVQ5Jkv1w 3Q5h+1PDhYHd3MFoonkFe4lC/5h+KedZCc6oWNk3wFpgWvxTLH56ehnWbAuid7F/ FYNSgDOxFGY3qCOJ3dPXqYPJg9u2SiNPo1Ner+2nnsSV5n+y+k43SzolMEktZavi uEAnbWy1vjod2jUQUaN7ykKFWNuvQxhtN8ZG1d5rQzRav+0ufA/6V7ZVZ09V7Sjd x7z+abrfhAkmE7tdE6IksDRkOqtSAXTMKp9DanKUc0060+01ObWyJLRVjKFL0iWR 6svQrfk9IAk3OUYzOmwMCGccyLXL44bLwAf+34QulZO+d8xdU5zNSvMmf8vtQkK4 tRGsvEqmH4r0sFpJW4yoGc6UsTuRkvuuP9ud/lkxAnn5d2k/6p8UAHtKM3Sz8cLM guUNN64OmBuc6+YivrRI76DhfbHhubOyRVBWKj3nNtCG2RP8B4yEFqpc3cJbwmwT Hl5GxFeAKyWEL5LxhvhJv/EtE8FjyY4qf1CA0uR+konJZF7xNzUZTeXwPh/j2P8O 1A5YtoKIdRLy3944mc+xaSE4KLRZ+IRntaNlgyCtNHFYr/h4/ZY= =f4Pl -END PGP SIGNATURE- ___ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel
Re: [Sks-devel] Data protection concern[Ref. RFA0751305]
Hi Kristian, hi Andrew, that email conversation was scary, informative and relieving at the same time. Thank you for sharing. Best regards Tobias Frei On Fri, Mar 8, 2019, 16:08 Kristian Fiskerstrand < kristian.fiskerstr...@sumptuouscapital.com> wrote: > On 3/8/19 3:19 PM, Andrew Gallagher wrote: > > On 08/03/2019 14:15, Kristian Fiskerstrand wrote: > >> The ICO has concluded in this case and no further action will be taken > >> from them. > > > > Was there any legal reasoning attached to this decision? > > It was a relatively good summary of situation including the data being > shared voluntarily and the nature of the keyserver gossipping network > also containing nodes being outside of the reach of GDPR. An important > factor in the treatment is however timely response to erasure request > with sufficient information. > > > -- > > Kristian Fiskerstrand > Blog: https://blog.sumptuouscapital.com > Twitter: @krifisk > > Public OpenPGP keyblock at hkp://pool.sks-keyservers.net > fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 > > Corruptissima re publica plurimæ leges > The greater the degeneration of the republic, the more of its laws > > ___ > Sks-devel mailing list > Sks-devel@nongnu.org > https://lists.nongnu.org/mailman/listinfo/sks-devel > ___ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel
Re: [Sks-devel] Data protection concern[Ref. RFA0751305]
On 3/8/19 3:19 PM, Andrew Gallagher wrote: > On 08/03/2019 14:15, Kristian Fiskerstrand wrote: >> The ICO has concluded in this case and no further action will be taken >> from them. > > Was there any legal reasoning attached to this decision? It was a relatively good summary of situation including the data being shared voluntarily and the nature of the keyserver gossipping network also containing nodes being outside of the reach of GDPR. An important factor in the treatment is however timely response to erasure request with sufficient information. -- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk Public OpenPGP keyblock at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 Corruptissima re publica plurimæ leges The greater the degeneration of the republic, the more of its laws signature.asc Description: OpenPGP digital signature ___ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel
Re: [Sks-devel] Data protection concern[Ref. RFA0751305]
On 08/03/2019 14:15, Kristian Fiskerstrand wrote: > The ICO has concluded in this case and no further action will be taken > from them. Was there any legal reasoning attached to this decision? -- Andrew Gallagher signature.asc Description: OpenPGP digital signature ___ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel
