migrating keyserver1.canonical.com to hockeypuck

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

migrating keyserver1.canonical.com to hockeypuck

Paul Collins-10
Hi,

A few weeks ago, we switched keyserver.ubuntu.com to hockeypuck.
Currently the new hockeypuck stack is peering with the existing
keyserver1.canonical.com and keyserver2.canonical.com.

As the next step, we plan to migrate keyserver1.canonical.com from
sks to hockeypuck.  (We haven't yet decided the fate of keyserver2.)

keyserver1's IP address will change from 91.189.89.49 to
162.213.33.38, and the recon and advertised HKP ports will remain
11370 and 11001 respectively.  If you're checking connectivity, be
advised that it can only be reached by our existing peers.

The unusual HKP port advertisement is no longer necessary with
our new hockeypuck deployment, but it seems harmless, and having
one thing fewer to change during the migration can't hurt.

The proposed recon configuration for keyserver1.canonical.com,
converted from an existing /etc/sks/membership, is below.  Please
let us know if you'd like anything regarding your peer changed.

---

# Christoph Anton Mitterer <[hidden email]>
[hockeypuck.conflux.recon.partner.a_sks_srv_scientia_net]
httpAddr="a.sks.srv.scientia.net:11371"
reconAddr="a.sks.srv.scientia.net:11370"

# Michael Sinatra <[hidden email]> 0x5B4EBA62
[hockeypuck.conflux.recon.partner.sks_es_net]
httpAddr="sks.es.net:11371"
reconAddr="sks.es.net:11370"

# CORIS-STS  <[hidden email]> 0xE74C8CDD
[hockeypuck.conflux.recon.partner.sks_stsisp_ro]
httpAddr="sks.stsisp.ro:11371"
reconAddr="sks.stsisp.ro:11370"

# Lars Vogdt <[hidden email]> 0xF62B7584
[hockeypuck.conflux.recon.partner.keyserver_opensuse_org]
httpAddr="keyserver.opensuse.org:11371"
reconAddr="keyserver.opensuse.org:11370"

# Kristian Fiskerstrand <[hidden email]> 0xE3EDFAE3
[hockeypuck.conflux.recon.partner.keys2_kfwebs_net]
httpAddr="keys2.kfwebs.net:11371"
reconAddr="keys2.kfwebs.net:11370"

# Michael Jones <[hidden email]> 0x1992274E129BAF74
[hockeypuck.conflux.recon.partner.sks_mj2_uk]
httpAddr="sks.mj2.uk:11371"
reconAddr="sks.mj2.uk:11370"

# Nicholas E. Bebout <[hidden email]> 0x110810E9
[hockeypuck.conflux.recon.partner.keys_fedoraproject_org]
httpAddr="keys.fedoraproject.org:11371"
reconAddr="keys.fedoraproject.org:11370"

# no contact information on file
[hockeypuck.conflux.recon.partner.keys_itunix_eu]
httpAddr="keys.itunix.eu:11371"
reconAddr="keys.itunix.eu:11370"

# Jeremy T. Bouse <[hidden email]> 0xD01E190C
[hockeypuck.conflux.recon.partner.sks_undergrid_net]
httpAddr="sks.undergrid.net:11371"
reconAddr="sks.undergrid.net:11370"

# Dirk Astrath <[hidden email]> 0x2840C708
[hockeypuck.conflux.recon.partner.sks_fidocon_de]
httpAddr="sks.fidocon.de:11371"
reconAddr="sks.fidocon.de:11370"

# Dirk Astrath <[hidden email]> 0x2840C708
[hockeypuck.conflux.recon.partner.keyserver_secure-u_de]
httpAddr="keyserver.secure-u.de:11371"
reconAddr="keyserver.secure-u.de:11370"

--
Paul Collins
Wellington, New Zealand

_______________________________________________
Sks-devel mailing list
[hidden email]
https://lists.nongnu.org/mailman/listinfo/sks-devel
Reply | Threaded
Open this post in threaded view
|

Re: migrating keyserver1.canonical.com to hockeypuck

Paul Collins-10
Paul Collins <[hidden email]> writes:

> A few weeks ago, we switched keyserver.ubuntu.com to hockeypuck.
> Currently the new hockeypuck stack is peering with the existing
> keyserver1.canonical.com and keyserver2.canonical.com.
>
> As the next step, we plan to migrate keyserver1.canonical.com from
> sks to hockeypuck.  (We haven't yet decided the fate of keyserver2.)

This is now live:

$ host keyserver1.canonical.com
keyserver1.canonical.com has address 162.213.33.38
$ _

Regards,
Paul

> keyserver1's IP address will change from 91.189.89.49 to
> 162.213.33.38, and the recon and advertised HKP ports will remain
> 11370 and 11001 respectively.  If you're checking connectivity, be
> advised that it can only be reached by our existing peers.
>
> The unusual HKP port advertisement is no longer necessary with
> our new hockeypuck deployment, but it seems harmless, and having
> one thing fewer to change during the migration can't hurt.
>
> The proposed recon configuration for keyserver1.canonical.com,
> converted from an existing /etc/sks/membership, is below.  Please
> let us know if you'd like anything regarding your peer changed.
>
> ---
>
> # Christoph Anton Mitterer <[hidden email]>
> [hockeypuck.conflux.recon.partner.a_sks_srv_scientia_net]
> httpAddr="a.sks.srv.scientia.net:11371"
> reconAddr="a.sks.srv.scientia.net:11370"
>
> # Michael Sinatra <[hidden email]> 0x5B4EBA62
> [hockeypuck.conflux.recon.partner.sks_es_net]
> httpAddr="sks.es.net:11371"
> reconAddr="sks.es.net:11370"
>
> # CORIS-STS  <[hidden email]> 0xE74C8CDD
> [hockeypuck.conflux.recon.partner.sks_stsisp_ro]
> httpAddr="sks.stsisp.ro:11371"
> reconAddr="sks.stsisp.ro:11370"
>
> # Lars Vogdt <[hidden email]> 0xF62B7584
> [hockeypuck.conflux.recon.partner.keyserver_opensuse_org]
> httpAddr="keyserver.opensuse.org:11371"
> reconAddr="keyserver.opensuse.org:11370"
>
> # Kristian Fiskerstrand <[hidden email]> 0xE3EDFAE3
> [hockeypuck.conflux.recon.partner.keys2_kfwebs_net]
> httpAddr="keys2.kfwebs.net:11371"
> reconAddr="keys2.kfwebs.net:11370"
>
> # Michael Jones <[hidden email]> 0x1992274E129BAF74
> [hockeypuck.conflux.recon.partner.sks_mj2_uk]
> httpAddr="sks.mj2.uk:11371"
> reconAddr="sks.mj2.uk:11370"
>
> # Nicholas E. Bebout <[hidden email]> 0x110810E9
> [hockeypuck.conflux.recon.partner.keys_fedoraproject_org]
> httpAddr="keys.fedoraproject.org:11371"
> reconAddr="keys.fedoraproject.org:11370"
>
> # no contact information on file
> [hockeypuck.conflux.recon.partner.keys_itunix_eu]
> httpAddr="keys.itunix.eu:11371"
> reconAddr="keys.itunix.eu:11370"
>
> # Jeremy T. Bouse <[hidden email]> 0xD01E190C
> [hockeypuck.conflux.recon.partner.sks_undergrid_net]
> httpAddr="sks.undergrid.net:11371"
> reconAddr="sks.undergrid.net:11370"
>
> # Dirk Astrath <[hidden email]> 0x2840C708
> [hockeypuck.conflux.recon.partner.sks_fidocon_de]
> httpAddr="sks.fidocon.de:11371"
> reconAddr="sks.fidocon.de:11370"
>
> # Dirk Astrath <[hidden email]> 0x2840C708
> [hockeypuck.conflux.recon.partner.keyserver_secure-u_de]
> httpAddr="keyserver.secure-u.de:11371"
> reconAddr="keyserver.secure-u.de:11370"

--
Paul Collins
Wellington, New Zealand

_______________________________________________
Sks-devel mailing list
[hidden email]
https://lists.nongnu.org/mailman/listinfo/sks-devel