diff --git a/docs/guides/performance.mdx b/docs/guides/performance.mdx index 4756b0af2..ff69329fb 100644 --- a/docs/guides/performance.mdx +++ b/docs/guides/performance.mdx @@ -82,6 +82,21 @@ Consult these documents for more information on compression tuning and levels: ## Other tweaks +### Tuning your trusted servers + +:::important Important: Vet your trusted servers! +Trusted servers are your first point of contact when obtaining public keys from the wider federated network. They could theoretically impersonate other servers and cause significant harm to your deployment. Please thoroughly verify your trusted servers' credibility before adding them to your configuration. + +If you need suggestions for trusted servers, ask in the Continuwuity support room. +::: + +For performance and reliability, it is recommended to set up 3 to 5 trusted servers for your deployment. Currently, these must all be Synapse servers. + +```toml +# Example config, using maintainers' recommended homeservers +trusted_servers = ["codestorm.net","starstruck.systems","unredacted.org","matrix.org"] +``` + ### Using UNIX sockets If your homeserver and reverse proxy live on the same machine, you may wish to expose Continuwuity on a UNIX socket instead of a port. This removes TCP overhead between the two programs. @@ -111,25 +126,6 @@ https://matrix.example.com { -### Tuning your trusted servers - -:::important Important: Vet your trusted servers! -Trusted servers are your first point of contact when obtaining public keys from other servers, and they could theoretically impersonate other servers and cause significant harm to your deployment. Please thoroughly verify your trusted servers' credibility before adding them to your configuration. - -If you need suggestions for trusted servers, ask in the Continuwuity main room. -::: - -Trusted servers are queried sequentially in the order they are listed. If you have multiple trusted servers configured, put the faster ones first: - -```toml -# Example config, using maintainers' recommended homeservers -trusted_servers = ["codestorm.net","starstruck.systems","unredacted.org","matrix.org"] -``` - -Avoid prioritising `matrix.org` as your primary trusted server, as it tends to be quite slow. - -Some users have also reported that increasing `trusted_server_batch_size` helps with faster joins for huge rooms. Start with doubling the default to `2048` until you find a suitable value. - ### Enable HTTP/3 on your reverse proxy Consider enabling the newer **HTTP/3** protocol for inbound connections to Continuwuity. In Caddy HTTP/3 is allowed by default, but you must expose port :443/**udp** on your firewall.