Re: [Sks-devel] keyserver stats gathering
On 2016-02-24 at 06:17 +, Mire, John wrote: > What is the process for the keyserver status page generation > (https://sks-keyservers.net/status/) > i.e., what scripts/queries are executed against the individual keyserver? > How often? > Campus is setting up Palo Alto firewalls with traffic/application inspection > and profiling It's an HTTP request, against the regular HKP service, just on a special endpoint; eg: http://sks.spodhuis.org:11371/pks/lookup?op=stats The only thing different about this is `op=stats` instead of `op=index` or whatever. This is considered public information, because your peers expect to be able to look at this to diagnose problems with the peering: your problems can become their problems, if you fall too far behind. Kristian has some PHP scripts which do the work for the sks-keyservers.net pages; I have other tooling, others will use browsers. Kristian's service is considered "canonical" by most, but is not in any way using privileged access. If you start blocking "unusual" requests for the stats which aren't at DoS levels then you'll upset your peers and lose peering. -Phil ___ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel
[Sks-devel] keyserver stats gathering
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 What is the process for the keyserver status page generation (https://sks-keyservers.net/status/) i.e., what scripts/queries are executed against the individual keyserver? How often? Campus is setting up Palo Alto firewalls with traffic/application inspection and profiling - -- John Mire: jm...@lsuhsc.edu Networking LSU Health System -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIVAwUBVs1LA+PfSlFQACbmAQrY7BAAypi/raBcGyAcMPHu7uO9IH3oqBrSxrno sLSbdzxdDoucnQqR4xgotGrhAbzt/Md0g8x0LakeGiEzxh8sZlDDDs6grj1rzga7 9Uzt7Wi2VTxQ0EabrjR+vqFNdvGO0Oo/1q+X+WmKncNG82DVYuQvdjo7noqgJSw6 ICHkKT0vr4/ovBW3DHnA1ClxDNwYEi2x6/3e1AhoEFGZPWF9KWPMx5e252sXZEM4 sxBVXbFuAkMoWjAhI308bGQr2mw2ig7aT3co+4PeL8JCubI1kjqXiWTbfkiFZihr /1zPqd5s6dPiUd9pFAWrTxEyzuXNMJbGsm8snnC9WN/k8Nn4ox7CDJIGlt4FK2Sa RsI+jnCSph6O8/lPfLLeAKdZ4mP+AP+JxQfBK2tjleKfe/0jG7iIJtM9CUQ6Dey2 c6BfVBJiAxGEjFvWsl5aE0hkfu+WlZNpAq/LfkFtR55rgAH0zJyG0UVcUxFu4bt1 62WMGALmqgFo3sidi6HoqxodzDDg/oqr/OhxCA/P4r4dbLZbAa8N5SJ7bzxo8aW3 VA9j+kxKcLOygILp1EzO4LPurpkydhtrVq4rWPZFjlhGGFDpEXM136rAEgLmCf6Q OhEELzSagqCGM7NWGbquUhLXyVbiVzlEZsZAF1WMfkqvdN+V+CFVGkkHtBXcd7LO V5soQrzFLJY= =DJ4b -END PGP SIGNATURE- ___ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel
