Skip to Content.
Sympa Menu

cacert-sysadm - Re: Development of infrastructure

cacert-sysadm AT lists.cacert.org

Subject: CAcert System Admins discussion list

List archive

Re: Development of infrastructure


Chronological Thread 
  • From: Mario Lipinski <mario AT cacert.org>
  • To: cacert-sysadm AT lists.cacert.org
  • Subject: Re: Development of infrastructure
  • Date: Mon, 09 Aug 2010 16:02:40 +0200
  • Authentication-results: lists.cacert.org; dkim=pass (1024-bit key) header.i= AT cacert.org; dkim-asp=none
  • Organization: CAcert (Organisation Assurance Germany, Wiki/Issue admin)

Am 09.08.2010 05:01, schrieb Ian G:
Also, there are other options:  moving the VMs off one at a time to
perhaps the Sonance site;  talking to HCC;

Imho, this could only work for some services. But for the core we need hardware which is fully controlled by CAcert. Once we have this done, we can plug in other locations.
For later: Are the virtualisation techniques Sonance uses documented somewhere?

reducing the number of VMs;

Yes, this is a step we need to consider. But to do this we first need more hardware to set this all up and test it, before the number can be reduced.

  exploring a TLS/SNI multi-hosting arrangement.

TLS/SNI is not that important for CAcert by now since I guess we have enough IP addresses available and maybe could even get more if we have a good reason for it. TLS/SNI would be no argument for rejecting ip space requests for now.
We have 30 usable IP addresses, but I do not know how many of them are being used - missing an overview on the wiki about this.

--
Mit freundlichen Grüßen / Best regards

Mario Lipinski
Board member,                       E-Mail: 
mario AT cacert.org
Organisation Assurer (Germany),     Internet: http://www.cacert.org
Wiki/Issue admin
CAcert

Support CAcert: http://www.cacert.org/index.php?id=13
                http://wiki.cacert.org/wiki/HelpingCAcert

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature




Archive powered by MHonArc 2.6.16.

Top of Page