ptprog

Http/2 actually means that using a cookieless domain isn't worth the pay off any more. Previously, the concern was the additional bandwidth and therefore loss of speed by including a few kb of cookies in each request. But now with http/2 the additional overhead of making a new connection, the lookup, the ssl handshake etc is actually slower than having everything requested off of the same domain, even if that means each request includes cookies - particularly since http/2 compresses them.
https://blog.theodo.com/2019/09/cookieless-domain-http2-world/
https://www.hostnexus.com/blog/http2-site-optimization/
So, the optimal way to do it would appear to be to drop the cookieless domain entirely. 
 
 

Regarding performance, my experiments show a small degradation of performance (15% ~ 20%, measured with a RUM script) during the period I used the preload setting.

I've put together a plugin which handles this in a different location, making it hookable - have sent a new copy of it to @Mopar1973Man to try it out. If anyone would like a copy then please PM me directly.
I won't be releasing it to the MarketPlace, as it does circumvent the security which IPS has built in to the product (albeit for only one configured account) - all I ask is you chuck me a beer 😉

Good news, everyone:
@Kevin Carwile will be taking over Advanced Tags & Prefixes going forward, including ongoing support and maintenance. Don't go too hard on him. I can't speak to what he has planned for the future, but if you've already purchased he should make sure you continue to be taken care of. Purchasing has also been reenabled, so if you've been waiting to buy it you can do that now.
Thanks for all your support over the years.
I'm out.

What's New in Version 2.2.1:
New features: 
Added a new setting so admins can enter Deletion Terms in a translatable editor field  It'll send out emails:  When the request is received (with a direct link to cancel it) When the request is approved When the request is cancelled
Use it on IPS 4.3 only. 
------------------------------------------------------
New setting:


This version was kindly provided by @Martin A. for a custom job.

No but I see what you mean. I just added it as a new setting for this app:

Will produce, according to the setting:

Will release it.

If I have a loft of emails in Email Error Logs, is it difficult resend all emails one by one.

It would be interesting to be able to send several, for example a "sellect all" option, or checkboxes.
Thank you.

Hi,
I have split my IPS Web App and Database server and they are hosted separately (Azure Web Apps hosting IPS app and Azure Database for MySQL). Given that data can be captured over the wire in clear text leading to secure vulnerabilities (note blocking port 3306 will not prevent someone sniffing traffic and seeing the data in clear text). The services are hosted in the same datacentre however this will not hide/fix the issue. Only hosting the web app and DB on the same server would prevent this issue.
Can you please enable an option in conf_global.php to enable IPS to initiate a secure connection to the database. Not sure what function is in use however if using the PHP MySQL_connect function, the last parameter is client_flags needs to be set to MYSQL_CLIENT_SSL.
However this gets implemented, I think its a critical setting required for a modern micro services design.
Thanks
Jonathon

Just to add to this as I'm sure we're not alone... I've reached the end of the economic line for a single VPS. I count myself lucky the provider is excellent and very few SPOF incidents. I don't wish to move to a single commodity dedicated server, I'm going horizontal. Using any of the leading VPS providers there is a 'private' network which isn't actually 'private'. A couple do offer it. A VPN would be the only solution that works at any host, based on your feedback @Lindywhich is more complex to setup and manage than certificates.
I don't think it's unreasonable for us to have a way of securely connecting to our database servers out of the box, others manage it.

Issuing certs and distributing them isn't really a challenge. With the rise of tools like RDS and other 'remote' cloud services, we're increasingly connected beyond the idilic single server setup. As @Johno2518 says, transport security is the key. Because even in a private world, it's not if, but when!

I'm probably going to solve this with either editing the core files, or following plan A with running Maria in a cluster and still having a 'localhost' connection. Its far better now than it used to be ? i.e. it works without needing a full-time dba to keep it running ?
 

As I mentioned previously, there seems to be a CSRF token in the login form.  This would also need to be sent as login parameter, but this kind of tokens have a variable value.  So, this is likely to make automated login impossible (but it would be nice if somebody from IPS could clarify this).

Lindy, you know i understand about servers and im not expecting to have my server down, and if its down, i will put it up right away.
What im telling is that we are not online 24 hours a day. If elasticsearch fails, ips could fallback to mysql. It doesn't need to rebuild the whole index. IPS supports rebuilding only the last few days, that will take few space and its fast.
Like i said, just a suggestion and im not expecting my server to fail. ?

Try rebuilding the cache again.  I think this solved the issue for me.

What's New in Version 3.1.8
Added memory of table parameters during tag management. Fixed possible blank prefix on topic for mobile devices. Fixed schema errors on support tool. Fixed mishandling of URL encoding (spaces, etc.) in admin tools. Fixed formatting of undefined prefixes. Potential fix of MySQL 5.7 compatibility issue on tag reindex. Known issues:
Conflict with IP.Pages saving of database settings is still unresolved. Cannot provide any estimate of if or when it will be resolved.

For the issue with tags not deleting, is there any fix for that? Or do I hold onto the unwanted tags until a fix can be done?
Also, when tag deletion works I get taken back to the first page of my tags after each deletion. Is it supposed to do that? That is a particularly unfriendly way to do anything in bulk.

Hi,
One feature that would improve a lot the moderation process would be the option to "quick edit" the topic title from inside the topic itself, i.e. by clicking and holding the title with the mouse.
Thanks.

I don't know if there are still CDNs that are origin push only, but those would no be supported by IPS.
In this particular case, the Google Cloud CDN imposes restrictions on the origin.  Not sure whether Google Cloud Storage is among the acceptable origins, though.

I don't know if there are still CDNs that are origin push only, but those would no be supported by IPS.
In this particular case, the Google Cloud CDN imposes restrictions on the origin.  Not sure whether Google Cloud Storage is among the acceptable origins, though.