CAcert System Admins discussion list

[Michael Tänzer <michael.taenzer AT cacert.org>]

That sounds like a good idea. I would definitely use a rsync service if
there was one. That could at least reduce traffic from CAcert internal
services and maybe others too until we have another solution.


On 17.10.2013 20:40, Mario Lipinski wrote:
> Maybe rsync also would be an option too.
> But I guess the main load comes from people who just take the CRL URL
> without thinking...
> 
> Mario
> 
> Am 17.10.2013 20:28, schrieb Andre Klärner:
>> What's about using a cloudflare service to distribute the crl.cacert.org 
>> site? They offer a free service which provides all we need to get the load 
>> off the firewall and the server.
>>
>> Regards, Andre
>>
>> "Michael Tänzer" 
>> <michael.taenzer AT cacert.org>
>>  wrote:
>>> On 17.10.2013 18:22, Wytze van der Raay wrote:
>>>> On 17.10.2013 17:55, Michael Tänzer wrote:
>>>>> On 17.10.2013 13:10, Wytze van der Raay wrote:
>>>>>> ....
>>>>>> Although the crl web server error logs don't show any signs of
>>> trouble,
>>>>>> I can see from the GB/hour download rates that there was an
>>> unusually high
>>>>>> amount of congestion between Oct 16 16:45 CEST and and Oct 17 00:30
>>> CEST,
>>>>>> with the rate dropping from 4.5 GB/hour to just 40 MB/hour :-(
>>>>>
>>>>> OK seems like I have to get the new signer project started soon so
>>> we
>>>>> get rid of this situation.
>>>>
>>>> Cutting down the size of the "regular" CRL is indeed the fundamental
>>> solution
>>>> to this problem. It's only thanks to our generous hosting agreement
>>> that we
>>>> are able to push out > 100 GB / day without a lot of costs.
>>
> 
> 
> 

-- 

Michael Tänzer

Attachment: signature.asc
Description: OpenPGP digital signature