A note about mod_shib2 and mod_http2

[Jacob Lundberg]

Hi Scott,

On Sat, 2017-08-19 at 01:21 +0000, Cantor, Scott wrote:
> Apache restarts should be instantaneous.)

Yes, very nearly.  I think I misunderstood what you were telling me to
restart.  You mean we should restart the httpd every time we update the
shibd's reloadable configuration, is that right?

However, this doesn't really make much difference because to restart the
httpd we have to take it out of service, which takes five to ten minutes
and another five to ten minutes to return it to service.  There are a
*lot* of virtual servers to instruct our load balancer to unbind and
rebind.  This is why we use graceful reloads...

> On 8/18/17, 9:20 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:
> There is no properly functioning system that would take that long.

Hmmm I'd love to know what is wrong with it.  We have almost certainly
got a lot more XML to process at startup than most SP users.  We're
probably downloading metadata from more sources than most.  A hefty
chunk of the startup time is in metadata acquisition, followed by
another long pause right after that which I haven't investigated.

> you should be skipping signature validation on the backup file, and that will at least work around the problem.

I'm afraid I'm not entirely following you on this suggestion.  Do you
mean we should make a configuration change to our MetadataProviders?
What change are you recommending?  I just bumbled around in the wiki a
bit but so far I haven't found anything that really jumps out.

Thanks,
-Jacob

-- 

Jacob Lundberg
AVP, IT Architecture
503.290.0100 (voice)
503.973.5252 (fax)