CAcert Code Development list.

[Michael Tänzer <michael.taenzer AT cacert.org>]

Hi Wytze,

On 23.12.2011 10:59, Wytze van der Raay wrote:
> As an interesting side-benefit I'd like to report that the load on the ocsp
> server has *significantly* dropped since applying this change. In the week
> before the change (Dec 9 - 16) we processed 2.225.530 OCSP requests, or
> about 222 per minute, in the next week directly after applying the change
> the number of requests dropped to 444.500 or only 44 per minute, a reduction
> of rougly 80%.

That's great news. I guess it's client side caching kicking in here.

On a side note: The numbers suggest that the server side caching
apporach proposed in https://bugs.cacert.org/view.php?id=1001 at least
does not result in an OCSP load we could not handle (additional ~58
requests per minute but probably reduced load on the OCSP server due to
the other servers taking some loads) and therefore might be doable.

-- 
Happy Holidays,
Michael Tänzer

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature