Re: [Sks-devel] Dropped from the pool

[Kristian Fiskerstrand]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 08/16/2015 03:58 PM, Daniel Roesler wrote:
> The gossip interval by default is 60min, which means you only get
> one gossip between health checks in the pool. I've set my 
> "gossip_interval: 1" so that it gossips every minute, which seems
> to keep my system up to date much better.
> 
> Daniel

This wouldn't scale indeed,

> 
> 
> 
> On Sun, Aug 16, 2015 at 1:04 AM, Kiss Gabor (Bitman) 
> <address@hidden> wrote:
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>> 
>> Dear Kristian,
>> 
>> I can see, that several servers are dropped from the pool with
>> reason "missing keys". (Including mine. :)
>> 
>> At this moment I can see three servers with key diff -344. 
>> Comparing this number to the total number of keys (4013325) we
>> get that 0.00857% of keys are missing. That is a ludicrously 
>> small ratio. :-)
>> 
>> I wonder how your filtering algorithm works? Did you set an
>> absolute or relative threshold of missing keys? Is it possible to
>> tune it a bit?

300 is the min treshold as set currently. It does a two-pass
calculation to determine std deviation, the treshold is Max(300,
0.5\sigma) from the median (lower bound). As 103 servers are listed as
active in the pool at the moment I don't see this as being any issue.
A server not being in the pool all the time is not in itself a problem
for the pool. However, how often do you calculate key stats? Most
servers likely do this on hourly or semi-hourly basis sending USR2 to
sks process (e.g. crontab; 25 * * * * pkill -USR2 sks || exit 1)

- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
"Whatever you do in life, surround yourself with smart people who'll
argue with you."
John Wooden
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCgAGBQJV0JxUAAoJECULev7WN52FztMH/0xmJq/My+ORyGoPpGKPrqUn
ZHNeFIWy0X62B4op6H0npsk5vhYgWn6eF6zkEFEFLZw82lE2rGiVriaz0ncFXPzU
VVRyHZgpT2N722X0TX6hbxptMW9M3cwaZ3rzn5GFPyzzf2nJVScYDcdw3vu+LcZ/
h25Wn6LtzfPvpxFC/j1sX9NIsqBFtKV2ROl9jsQnOli5c0lwh2TNEzWn0w/448t3
qSM91OKY2y7kBkcCIKeJVE65tsnz7shTCEgiitPrb61Cw769uo0Z7d9QX7T3GDvv
kpjdP9xc901kc24brUnFi63He2anQXY/yjXNdRRTr/8AtQiEaWMmqcKJlzbAVbM=
=nBDj
-----END PGP SIGNATURE-----