CAcert System Admins discussion list

[Andre Klärner <kandre AT cacert.org>]

On Fri 18.10.2013 11:49:19, Wytze van der Raay wrote:
> Hi Andre,
> 
> On 17.10.2013 20:28, Andre Klärner wrote:
> > What's about using a cloudflare service to distribute the crl.cacert.org
> > site?
> 
> That's an interesting suggestion! I didn't know about the free CloudFlare
> services. After having checked their website, it isn't entirely clear to
> me though where this would work for crl.cacert.org. Do you (or someone else)
> have any experience with the service?

Well, my suggestion was mainly to start a discussion about using a CDN for
such bandwidth-intensive content.

After a bit more research from my side, I think that CloudFlare wouldn't be
the way to go, unless we want to hit this problem with vast amounts of cash.

The more open-source approach would be something like CoralCDN. Their
approach also sounds quite easy to adopt, their upper limit according to
the FAQ is about 250GB/day. Essentially the changes to our side would be
redirecting clients to another URL that runs over Coral.

What might be interesting in this case: are there any anonymized logs for
crl.cacert.org? I'd like to consolidate the logs to check for patterns in
the traffic, like reoccuring user agents, frequent requests from a limited
set of hosts etc. Maybe we could even smart up the delivery by clever
caching outside the firewall, or redirecting specificly annoying clients to
another host that can handle the load better or to a small CDN.

Regards, Andre


-- 
Andre Klärner
prospective CAcert Organisation Assurer

CAcert needs funding to keep its services running, so if you find our
project useful please consider donating. For more information see
http://www.cacert.org/index.php?id=13

CAcert braucht Geld um seine Dienste weiterhin betreiben zu können. Wenn
Sie also unser Projekt nützlich finden würden wir uns über eine Spende
freuen. Mehr Informationen finden Sie auf
http://www.cacert.org/index.php?id=13&lang=de_DE

Attachment: smime.p7s
Description: S/MIME cryptographic signature