Hi Håvard! Havard Eidnes via RPKI wrote: > > rsync-durations: > ... > rsync://rpki.arin.net/repository/: status=-1, duration=300.045s > ...
That looks like rsync took too long -- by default, there is a 300 second timeout for rsync, whihc you can modify via the rrdp-timeout configuration/command line setting. If your network is rather slow, you might want to increase this value (or set it to zero to disable the timeout altogether). It exists as a precaution so that malicious repositories can’t just hang forever and block data generation. What’s a bit weird, though, is that it doesn’t use RRDP for ARIN. Can you check your log if there are any errors? There should be. > Looking at the log I see lots of "resources marked as unsafe" > messages related to the > rsync://rpki.arin.net/repository/rin-rpki-ta/..... entries, but > that is perhaps "normal"? Not really. These indicate that publication points (the individual data directories in a repository) have been rejected because something was wrong with their data. This whole unsafe resources business will be silent by default in the upcoming 0.12, precisely because it is very confusing. -- Martin -- RPKI mailing list RPKI@lists.nlnetlabs.nl https://lists.nlnetlabs.nl/mailman/listinfo/rpki
