Add Nomad Web functionality to Domino, and make the specialized SafeLinx proxy obsolete for Nomad Web and Nomad.
With that, Domino would be responsible for the port conversion of WSS-nrpc, authentication, SSO and MFA.
A normal (not specialized) Load Balancer (such as HAProxy, F5 Big-IP) would then load balance the HTTPS Websockets to the correct Domino server.
Essentially, this idea is about moving the Nomad Web functionality from SafeLinx to Domino.
There are several aspects how this could be beneficial:
Deployment of Nomad Web would become much cheaper, easier and more accessible for customers, because it does not require extra knowledge of an additional product (SafeLinx) and maintenance of an additional external database.
Simpler, faster deployment, because there are less discussions with extended engineering teams (e.g. Security Officer, Network Team etc.)
Existing Load Balancers at customer site could already deliver HTTP/3 QUIC, HTTP/2 etc. and the latest TLS implementations.
Security methods, such as authentication, SSO, 2FA methods already exist in Domino. This could make the development of Nomad Web cheaper.
Less support cost on HCL side, because Domino Administrators already know Domino, there are no questions regarding SafeLinx and no requirements for implementations of specific enterprise databases or MySQL.
Customer has more freedom of choice on how to implement Nomad Web (e.g. specialized VPN implementations)
[ Toni Feric, Belsoft Collaboration ]
Fantastic! Works perfectly and is already being used productively! Thank you!
excellent idea, bet on DOMINO.
I remember when sametime was good, until IBM added websphere, DB2 and I don't know how many other things. frankenstein!!
HCL: keep domino without adding another Frankenstein.
I would totally agree! The whole SafeLynx installation and connection is not "THE" pretty solution one could imagine!
Makes sense. For me the unique selling point of Domino is a do it all application/mail server that requires just one install. Adding layers of complexity makes it less attractive. I just want to install once and get everything not having the complication to install other add-ons separately or even worse on different servers.