Documentation
¶
Overview ¶
Package main is the parsec-keys-sync daemon: a tiny pub/sub bridge that mirrors Parsec keyring rotation events from one Redis (the source region) to N target Redis instances (the peer regions).
Why this exists ¶
Each region's KeyRingStore publishes a version-number payload to <prefix>:keyring:events when its ring rotates. parsec nodes in *that* region see the event and reload, but peer regions never hear about it unless something carries the message across.
parsec-keys-sync is that carrier. It does not replicate broker state, channel history, or anything else — it solely forwards key rotation events so a key retired in us-east is taken out of circulation in eu-west within a second.
Deployment ¶
Run one process per *source* region. Pass --from for the source Redis URL and one --to per target. The daemon is stateless and idempotent (re-sending an already-applied event is a no-op). Restart it with the same flags after any crash — there's nothing to recover.