Re: [Sks-devel] wserver_timeout value causing cascading failure?

2017-05-13 Thread Kristian Fiskerstrand
On 05/05/2017 06:16 PM, Jonathon Weiss wrote: > > I've tested a number of compromise configurations. I'm not sure I've > resolved the cascading failure (time will tell) but I was wondering, if > I've solved the timeout problem on large keys. Could you re-test? > At least for the particular

Re: [Sks-devel] wserver_timeout value causing cascading failure?

2017-05-05 Thread Jonathon Weiss
Kristian Fiskerstrand wrote: > On 04/24/2017 09:33 PM, Jonathon Weiss wrote: > > Daniel, > > > > I'm pulling your questions into this thread, which I started before > > seeing your mail: > > > > For reference, I can download this key without a

Re: [Sks-devel] wserver_timeout value causing cascading failure?

2017-04-24 Thread Phil Pennock
On 2017-04-24 at 13:53 -0400, Jonathon Weiss wrote: > An important note here is that I'm using Apache as a proxy for SKS (on > 80, 443, and 11371). > > If I understand how SKS works, it can accept and hold onto multiple > client connections at once, but only processes them serially. > 3) Any

Re: [Sks-devel] wserver_timeout value causing cascading failure?

2017-04-24 Thread Kristian Fiskerstrand
On 04/24/2017 09:33 PM, Jonathon Weiss wrote: > Daniel, > > I'm pulling your questions into this thread, which I started before > seeing your mail: > > For reference, I can download this key without a problem. While I'm > topologically closer to pgp.mit.edu than you are, I believe the 1s >

Re: [Sks-devel] wserver_timeout value causing cascading failure?

2017-04-24 Thread Jonathon Weiss
Daniel, I'm pulling your questions into this thread, which I started before seeing your mail: For reference, I can download this key without a problem. While I'm topologically closer to pgp.mit.edu than you are, I believe the 1s timeout should only count the time passing the info to Apache, not

[Sks-devel] wserver_timeout value causing cascading failure?

2017-04-24 Thread Jonathon Weiss
Hi All, As the maintainer of what is probably the most heavily used key-server on the net, I've run into a problem that I wanted to discuss here. An important note here is that I'm using Apache as a proxy for SKS (on 80, 443, and 11371). If I understand how SKS works, it can accept and hold