The Next Gen Database Servers Powering Let's Encrypt

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • I'm thankful for their OpenZFS tuning doc which they developed as part of this server migration: https://github.com/letsencrypt/openzfs-nvme-databases

    The one thing that I get hung up on when it comes to ZFS and SSDs is the wear pattern vs. HDDs. Take for example this quote from the README.md:

    >We use RAID-1+0, in order to achieve the best possible performance without being vulnerable to a single-drive failure.

    Failure on SSDs is predictable and usually expressed with Terabytes Written (TBW). Failure on spinning disk HDDs is comparatively random. In my mind, it makes sense to mirror SSD-based vdevs only for performance reasons and not for data integrity. The reason is that the mirrors are expected to fail after the same amount of TBW, the availability/redundancy guarantee is relatively unreliable.

    Maybe someone with more experience in this area can change my mind, but if it were up to me, I would have used the mirror drives as hot-spares, and relied on a local HDD-based zpool for quick backup/restore capability.

  • boulder

    An ACME-based certificate authority, written in Go.

  • Why are you assuming that their workload includes just one query per emitted certificate?

    The reality is that they are storing information during challenges, implementing rate limiting per-account, supporting OCSP validation and a few other things.

    You can investigate further if you really want to see the queries that they make against the database since their software (Boulder) is open source [1]. Most queries are in the files in the "sa" (storage authority) folder.

    [1] https://github.com/letsencrypt/boulder/

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Trying to do something a bit crazy

    1 project | /r/homelab | 4 Jun 2023
  • Raise a toast if you've ever used Lets Encrypt

    1 project | /r/sysadmin | 3 Sep 2022
  • How to automate regular renewal certificates for a private CA?

    1 project | /r/AskNetsec | 3 Sep 2021
  • r/crypto - Let's Encrypt's recommended reading list

    1 project | /r/CryptoToFuture | 19 Jun 2021
  • Let's Encrypt's recommended reading list

    1 project | /r/crypto | 18 Jun 2021