When Coherence security is enabled there is a significant performance hit

When Coherence security is enabled, every call to do the cache operation do a security check. This is negatively impacting application's performance. I'm using the built in DefaultController & java keystore login. Is there any workaround so that the performance can be improved.

Hi user9980369
It depends how you have implemented security. What version of Coherence are you using?
JK

Similar Messages

Cfhttp is slow when sandbox security is enabled

We are running ColdFusion10 Ent. on Windows Server 2008 R2 Standard and IIS ver. 7.5. Java Version: 1.7.0_45
We have also implemented the CF lockdown guide.
Things have been running quite smoothly for some time now. However, after applying CF update 14 on our QA server we noticed an huge performance hit for all CFHTTP calls when security sandbox is enabled. If we disable the ssb then performance returns to normal. Disabling the sandbox is not an option for us.
Here is the difference for a simple cfhttp request.
Sandbox enabled: 9109 ms.
Sandbox disabled: 79 ms.
Rolling back to update 12 fixes the issue.
We've since applied update 15 and now 16 with no change in this performance. After applying all update we always re-run the connectors as stated by Adobe.
Our local dev machines (mac and PC) do not seem to experience this behaviour so I'm a bit concerned it might have something to do with IIS/connectors etc. on the server.
Any suggestions/advice would be much appreciated as we cannot apply updates to our current prod installation running ver.10 update 12 until this issue is resolved.
Thanks in advance.
Update: To see if this issue was resolved in CF11, I installed CF11 on the same machine as above. Same issue exists with ssb enabled and the sandbox configured for my test app! The performance is still extremely poor for even a simple cfhttp request.
Message was edited by: mark huras

I would submit this as a bug if you have only started experiencing this since an update and are able to reproduce it. https://bugbase.adobe.com/index.cfm?event=newBug

WRT54G Strange connection issue when wireless security is enabled

The model # is WRT54G v2.2 with firmware 4.21.1. I knew that my internet connection was good because I connected my laptop directly to the wireless antenna. When the antenna is connected to my wireless router I can't connect, wired or wireless. I decided to reset the router and program back in the changes that I have made. I checked for internet connection after the reset, it's there. Made more changes, still good. Then when I enabled wireless security using WEP the wired and wireless internet connection goes away. Any ideas to fix this. Can I go back to the previous version of firmware?

hi... go to ftp.linksys.com/pub/network and try downloading older firmware for the router and downgrade the firmware, after that reset the router back to factory default settings and reconfigure it...

Cannot connect when wireless security is enabled

I have a linksys wrt54g ver.6 wireless router. My Dell laptop running vista can connect wirelessly to the internet just fine when I have wireless security disabled on my wrt54g router.
When I enable security (I tried WEP) the network connection on my laptop fails and I see this message in vista’s “Connect to a network” window:
"The settings saved on this computer for the network do not match the requirements of the network"
Any ideas on how to fix this? Thanks!!!

Open network & sharing center ..... click manage wireless networks
Configure the wireless settings manually .....
Reboot the computer & see if it is connected to the network or not .....

Enable lastlogin timestamp cause big performance hit

We have installed the ODSEE 11g in our environment and we want to enable the lastlogin timestamp but base on the slamd testing result, the performance got hit almost 50% for user authentication. Is this normal? I created SR with oracle and was told it is normal. is anybody using this function as well? if so any tricks or workaround to increase the perfromance?
Thanks

It's basically adding an update for every BIND operation. If the lastlogin attribute is indexed, there is even more write load. The tuning you can do should start with the kind of tuning you'd do for a high volume of updates to the Directory. You should instrument the host, paying particular attention to iostat data like service times on disks and how much CPU time is spent in IOWait.

I can't find an option to add a recovery email for the purpose of resetting my security questions. There is also no option when I am in the "manage my account" area that lets me reset my security questions. How can I reset them?

I can't find an option to add a recovery email for the purpose of resetting my security questions. There is also no option when I am in the "manage my account" area that lets me reset my security questions. How can I reset them?

1. See my User Tip for some help: Some Solutions for Resetting Forgotten Security Questions: Apple Support Communities.
2. Here are two different but direct methods:
    a. Send Apple an email request at: Apple - Support - iTunes Store - Contact Us.
    b. Call Apple Support in your country: Customer Service: Contacting Apple for support
        and service.
3. For other queries about Apple ID see Frequently asked questions about Apple ID.
4. Rescue email address and how to reset Apple ID security questions
5. For online assistance use Apple - Support - Express Lane

Express unable to connect to Extreme when wireless security enabled

I have an Airport Extreme base station enabled as a WDS and communicating with an Airport Express which all works great to connect wirelessly to the internet and to play iTunes music on my stereo. The problem is that whenever I enable wireless security on the base station in an attempt to set up and maintain a private connection, the Express blinks amber, cannot recognize the network set up by the base station, and fails to work with iTunes. When I disable wireless security, it goes back to working again. I've tried re-enabling WDS and all kinds of other things, but to no avail. I'm thinking that somehow the Express must be authorized to communicate with the base station, but I don't know exactly how to do this, and the documentation from Apple is not clear on this. Can someone advise? Thanks.

The reason the Airport Express loses its connection is that it doesn't know the password.
You have two ways of doing this.
1. When adding security to a WDS network, add it to the remote nodes first then turning them off, before adding it to the main base station and turning the nodes back on.
2. Hard/Factory reset the Airport Express nodes and then reconfigure the main base station before then configuring the reset Airport Express units.
Resetting AirPort Express
http://docs.info.apple.com/article.html?artnum=108044
iFelix

Icloud: i would like to enable it but I get 'Account not verified', when I check my emails there is no email to verify it

when I try to enable my icloud I get 'Account not verified - check email'. But no email is received

It could be that the site is trying to determine your location to enable downloading from nearest to your location. So sometimes the download confirmation box may take some time to appear.
You can also try this direct link: http://releases.mozilla.org/pub/mozilla.org/firefox/releases/9.0.1/win32/en-US/
'''Firefox Setup 9.0.1.exe''' is the file. This is the US English version. To look for other versions, click '''Parent Directory''' to traverse back.

WebLogic Admin Console won't work with java security manager enabled.

By just enabling the security manager on the command line with -Djava.security.manager and using the default weblogic.policy in the server/lib directory, the admin console will not work. I just see a blank page when I try to access the admin console with permission errors all over on the server console.
In looking at the admin console's weblogic.xml it should have access to everything since it contains:
grant {
permission java.security.AllPermission;
Are there known issues with this? If I add this permission to the weblogic.policy file everything works fine but then I might as well not turn on the security manager.
Thanks,
Dave

David,
I was glad to see your post regarding WLS 9.2 and the troubles with enabling Java Security Manager.
Were you able to learn any more on things like - why doesn't the admin console work when the security manager is enabled with the default policy file. Also, why is it so difficult to add permissions for your own applications and get them to actually work.
I'd be curious to see if you were able to get it to work or if you have any insights or resources that can help with this as we are really struggling to get a restrictive policy file that works.
Thanks,
D

Coherence Security

I am trying to understand the security configuration(s) that i need to perform to secure the coherence usage for our application:
Our application uses the following coherence features:
1. Distributed Cache
2. Portable Object Format
2. Invocation Service
3. Active Cache Configuration
4. Coherence JPA implementation
At a bare minimum reading the security guide. It seems I need to perform the following configurations:
1. Specify Coherence Privileges in the Java Security Policy File
2. Configure Host-Based Authorization
3. Enable the Access Controller Security Framework
Q. Is there any other security measures I need to uptake ?
Q. I am finding a bit hard to follow the security guide, is there some sort of whitepaper or presentation around which covers this security section for coherence as well ?
Thanks,
regards,
Ankit

Ankit Asthana wrote:
Hi NJ,
Thanks for the link you provided.
The example site you provided had a disclaimer on it stating they are not best practices.Yes because they are examples on how you can implement security within Coherence and def. not focused on security best practices.
>
On another note are you aware of if WLS has any plans to extend their security infrastructure to Coherence? Or maybe OPSS ... ?Not that I am aware of, and I don't think it will be ever done. The reason why most customers use Coherence is to gain performance and security always have a performance overhead ...
>
regards,
Ankit

I just upgraded to Firefox 5.0.1 and since the "lock" icon never appears when accessing secure websites, where should I look for it?

I just recently upgraded to Firefox 5.0.1 and now the "lock" icon doesn't appear anywhere (I can find) when accessing secure websites. I haven't seen it once. It used to appear in the lower right corner of the screen. I also have Norton Internet Security.

Padlock is no longer part of Firefox; it was removed beginning in Firefox 4. The padlock shows that there is a secure connection but does not supply additional information. You could have made a typographical error and still have been connected to a secure connection. The padlock was replaced in Firefox 3 with the Site Identity Button. Familiarize yourself with the Site Identity Button at the left end of the Location Bar:
*https://www.mozilla.com/en-US/firefox/security/identity/
*https://support.mozilla.com/en-US/kb/Site+Identity+Button
*http://www.dria.org/wordpress/archives/2008/05/06/635/
You can install this add-on if you wish: *https://addons.mozilla.org/en-US/firefox/addon/padlock-icon/
'''If this reply solves your problem, please click "Solved It" next to this reply when <u>signed-in</u> to the forum.'''
Not related to your question, but...
You need to update some plug-ins:
*Plug-in check: https://www-trunk.stage.mozilla.com/en-US/plugincheck/
*Adobe PDF Plug-In For Firefox and Netscape: [https://support.mozilla.com/en-US/kb/Using%20the%20Adobe%20Reader%20plugin%20with%20Firefox#w_installing-and-updating-adobe-reader Installing/Updating Adobe Reader in Firefox]
*Next Generation Java Plug-in for Mozilla browsers: [https://support.mozilla.com/en-US/kb/Using%20the%20Java%20plugin%20with%20Firefox#w_installing-or-updating-java Installing or Updating Java in Firefox]

When I try to reformat there is an error message about configurations with the pointing device

When I try to reformat there is an error message about configurations with the pointing device
I am not sure I am on the correct section in the support area for Lenovo.
I had a mouse issue. It was unable to read the mouse. Now the mouse is working and it is initialized.
I have no idea why.
There is an error message saying that I should press F 1or F2. I pressed down F 1 and I tried to work with it and I enabled the mouse or I tried. The mouse is working fine but the computer will not recover completely the way it used to.
It is very confusing. When I shut down and restart there is an message that was not there before about the pointing device. Also the recovering operation never asked me for disks. Now it is doing that. I have disks but this is all confusing. I just want the computer to be the way it was. It is working fine except for booting up and the messages.

Hi marissa, welcome to the forums,
you may or may not be in the right place, but it would certainly help members to help you if you could post exactly which Lenovo system; notebook / computer, you have and which operating system is installed on it.
Thanks in advance
Andy ______________________________________
Please remember to come back and mark the post that you feel solved your question as the solution, it earns the member + points
Did you find a post helpfull? You can thank the member by clicking on the star to the left awarding them Kudos Please add your type, model number and OS to your signature, it helps to help you. Forum Search Option T430 2347-G7U W8 x64, Yoga 10 HD+, Tablet 1838-2BG, T61p 6460-67G W7 x64, T43p 2668-G2G XP, T23 2647-9LG XP, plus a few more. FYI Unsolicited Personal Messages will be ignored.
Deutsche Community Comunidad en Español English Community Русскоязычное Сообщество
PepperonI blog

Downloaded file won't open when password-secured

Since moving from Acrobat 8 to 9, my passworded pdf file will not open once it is downloaded from the server. My file was created as an .xls file in openoffice, then converted to pdf. Password security was then set in Acrobat 9 pro (mac). I works fine when not passworded. Is there something I can do to regain the security functionality? Note: the problem only occurs AFTER uploading to the server; it works as it should on my computer before that.

Thanks - I tried do that but I didn't see any appropriate forum - the choices were too specific. Any chance you could point me to the correct one to deal with this issue?

Get client browser version in C# (When IE Compatibility mode enabled)

We need to know client's browser version from C# code (Server side). We use Request.Browser or HTTP_USER_AGENT to get the details.
However, In IE when compatibility mode is enabled it always returns IE 7 version irrespective of version of IE. ie, even in IE 11 when compatibility mode enabled it returns IE 7 but I want actual version which is IE 11. Is there any way I can get actual IE
version?

this is a c# forums section, you can post in the asp.net forums:>
forums.asp.net
Mark as answer or vote as helpful if you find it useful | Ammar Zaied [MCP]

When ip cef is enable timeouts occur

First i want to enable netflow on our routers, and in order to do that i need to enable IP CEF. but when i enable cef all of the point to point vpn sites connected to the router, they stay connected but the terminals that connect to our citrix farm will not connect they from what i can tell timeout on the connection. disabling cef they can connect. enabling cef they can't connect,
This is really odd behavoir since we can still remote access the site but the terminals just can't connect when ip cef is enabled.
I attached the config of the router, i removed the tunnels and other various things that is not relivant(i believe)

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
I'm not 100% certain, but I believe FastSwitching and CEF switching apply to unicast, not multicast. Your "IP mroute-cache" command enables/disables fast multicast switching.
On a 3750, switching should be hardware based, for unicast and multicast, unless TCAM resources are insufficient. If hardware switching falls back to non-hardware switching, you'll likely find process vs. Fast vs. CEF vs. multicast doesn't matter, all too slow.

When Coherence security is enabled there is a significant performance hit

Similar Messages

Maybe you are looking for