199 Lotus blogs updated hourly. Who will post next? Home | Blogs | Search | About 
 
Latest 7 Posts
MWLUG 2017 presentation - Notes, Domino and the single sign on soup
Thu, Aug 10th 2017 206
Renewing LetsEncrypt SSL certificates automatically - redux
Wed, Aug 2nd 2017 7
Domino NIFNSF update - you probably don’t want to enable it
Fri, Mar 31st 2017 8
Moving Domino NIF indexes out of the NSF
Wed, Mar 29th 2017 2
2016 the annus horribilis review
Mon, Dec 19th 2016 7
Renewing LetsEncrypt SSL certificates automatically with NginX
Fri, Dec 9th 2016 20
WTF? A new podcast? If you liked This Week In Lotus, you should (at least) like ’WTF Tech’
Mon, Oct 31st 2016 4
Top 10
MWLUG 2017 presentation - Notes, Domino and the single sign on soup
Thu, Aug 10th 2017 206
Renewing LetsEncrypt SSL certificates automatically with NginX
Fri, Dec 9th 2016 20
Domino and SSL ciphers. The server document may not be doing what we expect it to do
Tue, Feb 3rd 2015 9
The Domino fixes for POODLE and TLS, you may not be done yet
Tue, Nov 4th 2014 8
How to disable SSLv3 in Domino
Fri, Dec 12th 2014 8
Domino NIFNSF update - you probably don’t want to enable it
Fri, Mar 31st 2017 8
New-ish Domino Configuration Tuner (DCT) rules are available
Mon, Feb 2nd 2015 7
TLS 1.2 in Domino and the settings I use
Mon, Apr 6th 2015 7
2016 the annus horribilis review
Mon, Dec 19th 2016 7
Renewing LetsEncrypt SSL certificates automatically - redux
Wed, Aug 2nd 2017 7


Domino NIFNSF update - you probably don’t want to enable it
Twitter Google+ Facebook LinkedIn Addthis Email Gmail Flipboard Reddit Tumblr WhatsApp StumbleUpon Yammer Evernote Delicious
Darren Duke    

In my last post about NIFNSF, Christian Hensler left this comment:

Image:Domino NIFNSF update - you probably don’t want to enable it
I couldn't find anything on the internet, so off I went to the Design Partner forum. Now this is a NDA'd so I'm maybe skirting the rules here, but there is indeed an IBM reproduced issue with performance with NIFNSF. So this AM I did some testing and I was able to reproduce the issue. Base on my testing, on average, the current NIFNSF implementation is twice as slow as non-NIFNSF databases.

So you many not want to implement it just yet.



---------------------
https://blog.darrenduke.net/Darren/DDBZ.nsf/dx/nifnsf-update-you-probably-dont-want-to-enable-it.htm
Mar 31, 2017
9 hits



Recent Blog Posts
206
MWLUG 2017 presentation - Notes, Domino and the single sign on soup
Thu, Aug 10th 2017 7:44p   Darren Duke
As promised, here is the presentation from my MWLUG 2017 session on SSO. If you need (for hire) help with any of this see the STS contact page.
7
Renewing LetsEncrypt SSL certificates automatically - redux
Wed, Aug 2nd 2017 10:56a   Darren Duke
After almost a year of using Let's Encrypt to secure this very site, I'm still running into issues automatically renewing the certificates every 90 days. In my last post about this I'd documented the procedure I was using but was unable to ever get it to work successfully via cron (it was fine manually). I've now switched to a different auto-renew method....Enter: certbot This seems much simpler, tidier solution. The only snag for me was it required Python 2.7 to be installed. I sent a
9
Domino NIFNSF update - you probably don’t want to enable it
Fri, Mar 31st 2017 2:33p   Darren Duke
In my last post about NIFNSF, Christian Hensler left this comment: I couldn't find anything on the internet, so off I went to the Design Partner forum. Now this is a NDA'd so I'm maybe skirting the rules here, but there is indeed an IBM reproduced issue with performance with NIFNSF. So this AM I did some testing and I was able to reproduce the issue. Base on my testing, on average, the current NIFNSF implementation is twice as slow as non-NIFNSF databases. So you many not want to impl
2
Moving Domino NIF indexes out of the NSF
Wed, Mar 29th 2017 4:16p   Darren Duke
New in Fix Pack Feature Pack 8 is the ability to move the view index files out of the NSF. NIF is the technical term for these index files and end with the file suffix of NDX. Doing this has several advantages including: Make the NSF smaller, so better backup times Help get more out of the 64GB limit....if 6GB of your NSF is NIF index, that's a logt of space Move NIF's to better performing storage, for example SSD's Allows concurrent access to to databases and views, so theoretically better
7
2016 the annus horribilis review
Mon, Dec 19th 2016 2:30p   Darren Duke
Firefox started at 43, ended at 50 (they are slowing down....) Chrome started at 47, ended at 55 (they are speeding up....) IE....you know what? F**k IE. Still using Chrome as my primary browser, although Vivaldi is slowly taking over Didn't go Connect 16. Won't be at Connect 17. I already know what's going to happen....IBM is going to tell you about all the products that they promise * cognitive* is being added too. Like Verse (2 years ago?) and Toscana. "No, really we are" the
20
Renewing LetsEncrypt SSL certificates automatically with NginX
Fri, Dec 9th 2016 4:06p   Darren Duke
A while back I blogged that I switched the SSL on this blog to Let's Encypt, the free SSL provider. I even linked to the Crontab post I used to renew the SSL certificate (they are only good for 90 days, so need to be renewed regularly). Except mine would not renew. Hum.... I eventually got around to looking at this before the certificate ran out on Dec 20th and it turns out I needed to do a few more steps. If you manually run the renew.sh on the server without these additional steps thi
4
WTF? A new podcast? If you liked This Week In Lotus, you should (at least) like ’WTF Tech’
Mon, Oct 31st 2016 10:14a   Darren Duke
A long time ago, before IBM came down like a hammer, there was a podcast. We really enjoyed doing This Week In Lotus, but it became a bit untenable as IBM threatened all kinds of stuff (including revoking *my* Champion status.....) so we stopped. But IBM kept doing "WTF?" kinds of things.....canceling 9.0.2, going to fix packs only, spreading Java 8 out over a year (from now). After getting together at MWLUG, Stuart and I started to reminisce and we started thinking about saddling up again.
6
Switched to Let’s Encrypt for the blog SSL certificate
Wed, Sep 21st 2016 12:25p   Darren Duke
I had switched the blog to SSL a while back (mainly due to Google threatening that non-SSL website will take a hit in searches). At the time Let's Encrypt (the free, yes free, CA SSL issuer) was just getting started and didn't have roots published to most of the browser root stores. Because of this I went with free certificate available from Start SSL. I'm not disappointed with StartSSL, it's just time to try something else when the StartSSL certificate expired. In fact if you need anything
5
iNotes and IE Standards mode now seems to work in 9.0.1 FP7
Wed, Sep 14th 2016 10:28a   Darren Duke
I had praised, then lamented the new-ish iNotes forms templates that allow you do copy and paste images from the clipboard into IE. Well, with FP7 IBM (so far) seem to have addressed the issue search issue that forced me to disable this again. It's now back on for my servers. Let's see how long before I lament this again. It is probably work pointing out that Ulrich Krause is reporting issues with the "normal" iNotes forms9.nsf shipped in FP7. I have not seen the issue he reported in t
4
9.0.1 FP7 and how to enable the new port encryption settings
Wed, Sep 14th 2016 4:59a   Darren Duke
9.0.1 FP7 has shipped. It's not all we hoped (only three new features, and no Java 8) but yet again the Domino security team has added stuff, this time the oft requested update to Notes client port encryption. But (at the time of writing) all the technotes on how to enable this either go to the wrong page (ICCA) or a nice looking, but still pointless 404 page. So how do you enable this? We'll after scouring the design partner forum I found a post from the lovely Dave Kern that outlined thi




Created and Maintained by Yancy Lent - About - Planet Lotus Blog - Advertising - Mobile Edition