Go Back   Home > Forums > >
Home Forums Rules Articles diyAudio Store Blogs Gallery Wiki Register Donations FAQ Calendar Search Today's Posts Mark Forums Read

Site Announcements Updates to the forums will be displayed here.

Moving server this Sunday/Monday 30th July
Moving server this Sunday/Monday 30th July
Please consider donating to help us continue to serve you.

Ads on/off / Custom Title / More PMs / More album space / Advanced printing & mass image saving
Reply
 
Thread Tools Search this Thread
Old 31st July 2017, 02:45 AM   #11
rayma is online now rayma  United States
diyAudio Member
 
Join Date: Apr 2011
Works great here!
  Reply With Quote
Old 31st July 2017, 03:35 AM   #12
Jason is offline Jason  Australia
:)
diyAudio Administrator
 
Jason's Avatar
 
Join Date: Oct 2000
Location: Melbourne
Moving server this Sunday/Monday 30th July
I believe I've now got the wiki working. If anyone experiences any problems with it please let me know here.

Quote:
Originally Posted by Zero D View Post
@ Jason

Here's a few good testing www's which can show how good, or not, your HTTPS config is

SSL Server Test (Powered by Qualys SSL Labs)

https://www.httpvshttps.com

Free SSL Web Server Tester - Wormly

Plus, check out the highly recommened & FREE cert www too If you havn't already

Let's Encrypt - Free SSL/TLS Certificates

All the best with Everything
Thanks. Yes, I'm familiar with most of these. I already have our Let's Encrypt certificates set up on the new server (the old server was too old to run LE, and even the new one had some issues - LE has a LOT of dependencies and is quite fickle). The Qualys test is the gold standard, and I used it a lot of the last week to ensure we got an "A+".

One of my best friends runs Wormly. We've been using Wormly for years to keep track of server load and downtime. Great to see you mention it! We've also now started using New Relic to provide a finer grained analysis of what's going on in the server and it's been wonderful.

So far the new server configuration looks like it's working very well. Initial page creation time is now down to about 60-70ms on the new server with NginX+PHP-FPM. As a comparison we were looking at 300ms prior to the move from the old server, and 600ms prior to upgrading to PHP7. It went something like this:
  • Last few years: 150-200ms
  • After upgrading our forum software and plugins to more stable, secure (and slower) versions: 500-600ms
  • After upgrading from PHP5 to PHP7 (Monolithic Apache+PHP): 300ms
  • After upgrading to the new server, and switching to NginX+PHP-FPM: 60-70ms

That's just the initial page creation time. I am working now to ensure that all javascript and advertising is loaded asynchronously (in the background, not affected page rendering speed), and improving CDN configurations.

Quote:
Originally Posted by SyncTronX View Post
A lot of work behind the scenes, it is important for those of us who care about
DIYAudio site know what is going on behind the scenes etc. I for one appreciate it.

I'm sure you and other are aware how great and user friendly it is to use this DIYAudio
as opposed to yahoo groups. Yahoo is pretty worthless IMO and even trying to follow
threads etc is virtually impossible.

With all that you are doing do you have plans for the DIYAudio to use some type of
live video steaming/ conferencing type format, that could be use to show amp work
or pre amp trouble shooting live? participants could join and ask questions etc.
live while things transpire?
This could be a great idea...

Quote:
Originally Posted by kpsthakur View Post
Hi Jason, please confirm if Tapatalk plugin will be enabled soon after the upgrade
Yes, it will.
  Reply With Quote
Old 31st July 2017, 04:09 AM   #13
Dude111 is offline Dude111
diyAudio Member
 
Join Date: Apr 2013
Smile  

Quote:
Originally Posted by Jason
It will be HTTPS ready and I have got a full HTTPS-only configuration working well, however moving to HTTPS is not as simple as flicking a switch, there are myriad compromises and incompatibilities to be considered. I expect we will move to HTTPS within the next month.
Thank you Jason..... May I ask you please dont FORCE https??

Some of us wont be able to directly get here if you do and really there is NOTHING ON THIS SITE requiring SSL.... (No sensitive data here)

www.cellar.org (Also VBB) has HTTPS but they do not block HTTP sessions which is nice...


SSL is mainly for banking sites


Thank you for your hard work!!
  Reply With Quote
Old 31st July 2017, 04:49 AM   #14
Gnobuddy is offline Gnobuddy  Canada
diyAudio Member
 
Join Date: Mar 2016
Quote:
Originally Posted by Dude111 View Post
Some of us wont be able to directly get here if you do
May I ask what would prevent anyone from getting to this site if https were required? HTTPS has been built into every browser for years, doesn't cost anything, and requires no configuration from the user. So what is the issue?
Quote:
Originally Posted by Dude111 View Post
and really there is NOTHING ON THIS SITE requiring SSL.... (No sensitive data here)
Imagine you had a house in a city of ten million people. Not all of those people are going to be nice respectable citizens. You have no sensitive information in the house, but you do have a good amount of normal household goods. Would you feel save leaving all the doors and windows open while you go on vacation for a month? Now imagine you have a website on the Internet (a virtual city with a couple of billion inhabitants, not all of them nice respectable citizens). You have no banking or financial information on that website, but you do have vast amounts of data which took a lot of time, money, person-hours to generate. You also have a large amount of information that might breach the privacy of thousands of users to varying degrees. Now, would you feel safe leaving all the doors and windows of your virtual house wide open?
Quote:
Originally Posted by Dude111 View Post
SSL is mainly for banking sites
Not true. The Internet is a hostile place. Statistically, one in twenty people is a psychopath. Two billion people on the 'Net implies one hundred million psychopaths have access to your website. Suppose one in a thousand of them has some really serious hacking skills; you now have one hundred thousand top notch hacker psychopaths to deal with, any of whom might decide at any time that it would be entertaining to make your life hell. Still feel safe? Ask the people who run servers, who manage server security, who see the server logs showing the constant attacks by thousands of faceless cyberspace thugs. HTTPS is certainly not a cure for all the threats on the internet, but it is one tiny step towards better safety. It should be mandatory for all websites these days; we are not living in the infancy of the Internet any longer, those golden days when the only people on the 'Net were scientists and researchers sharing their research papers with each other, and nobody had ever heard terms like "DDOS attack" and "botnet" and "ransomware". -Gnobuddy
  Reply With Quote
Old 31st July 2017, 11:36 AM   #15
Konzentr8 is offline Konzentr8  United Kingdom
diyAudio Member
 
Konzentr8's Avatar
 
Join Date: Aug 2015
New server works great, the homepage , threads , posts , subs etc all load at lightspeed now no hanging or delay at all.
__________________
If it's not broken let's fix it until it is
  Reply With Quote
Old 31st July 2017, 01:19 PM   #16
Jason is offline Jason  Australia
:)
diyAudio Administrator
 
Jason's Avatar
 
Join Date: Oct 2000
Location: Melbourne
Moving server this Sunday/Monday 30th July
Great to hear Still tweaking things, but it's settling down. This is probably as quick as we'll get with vBulletin, but it will be game-on when we migrate to XenForo.

When we move to HTTPS, it will be strictly HTTPS only. All HTTP requests will be re-written using HSTS immediately to HTTPS. I believe also that all URLs on the page linking to foreign websites, will be re-written to HTTPS. There are technical reasons for this. If there are any remote deep linked images that don't respond to HTTPS requests they will appear as dead images. With the photopost ruckus recently, I will definitely be looking into creating some kind of easy to use system to "recover" dead images from other websites, but I think it will need to leverage the membership to do any uploading so the site is protected from legal ramifications courtesy of the DMCA.

We won't be rushing into it, though as I mentioned I have had it running smoothly in development. If you don't have a SSL compliant browser, now would be a good time to upgrade. From what I recall, it's likely IE on XP won't work at all. XP went EOL in 2014, and nobody should be using it in 2017 to browse the web unless they have a penchant for acquiring viruses.
  Reply With Quote
Old 31st July 2017, 09:46 PM   #17
Dude111 is offline Dude111
diyAudio Member
 
Join Date: Apr 2013
Maybe you could use cloudfares system Jason?

They have an HTTPS program called "No browser left behind" that works with ANY browser

Heres a link about it: http://blog.cloudflare.com/sha-1-dep...er-left-behind

I dunno.... Regardless thank you Jason for caring and maintaining things here!
  Reply With Quote
Old 1st August 2017, 12:56 AM   #18
Jason is offline Jason  Australia
:)
diyAudio Administrator
 
Jason's Avatar
 
Join Date: Oct 2000
Location: Melbourne
Moving server this Sunday/Monday 30th July
Yes, we use Cloudflare already.

We just experienced an unexpected 30 minutes of downtime. I was working on the backup process and there was an issue with the database. The database has been checked and it appears to be working fine now. I am working out why this happened (looks like it was related to the new configuration we are using).
  Reply With Quote
Old 1st August 2017, 01:42 AM   #19
Jason is offline Jason  Australia
:)
diyAudio Administrator
 
Jason's Avatar
 
Join Date: Oct 2000
Location: Melbourne
Moving server this Sunday/Monday 30th July
Have been working with our host to debug this database issue, looks like we have it resolved now. May need to do a few more tests.
  Reply With Quote
Old 1st August 2017, 04:27 AM   #20
Pano is offline Pano  United States
diyAudio Moderator
 
Pano's Avatar
 
Join Date: Oct 2004
Location: SW Florida
Moving server this Sunday/Monday 30th July
Working OK here on Mozilla and Safari. Just the issue with attached jpeg images.
  Reply With Quote

Reply


Moving server this Sunday/Monday 30th JulyHide this!Advertise here!
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
diyAudio will be down this Sunday/Monday for upgrades Jason Site Announcements 78 6th August 2017 05:30 AM
Wanted Alpine 7909 30th anv 427Boss Car Audio 3 22nd October 2016 02:16 AM
Using PC as server and storage-replacing NAS DNLA server birdyman PC Based 6 22nd June 2011 09:16 AM
alpair 6 + 10 gen 2, availiable Monday norman bates Full Range 2 18th September 2010 09:46 AM
Monday Night Excess kelticwizard The Lounge 0 1st October 2006 08:42 AM


New To Site? Need Help?

All times are GMT. The time now is 01:00 AM.


Search Engine Optimisation provided by DragonByte SEO (Pro) - vBulletin Mods & Addons Copyright © 2018 DragonByte Technologies Ltd.
Resources saved on this page: MySQL 15.00%
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2018 DragonByte Technologies Ltd.
Copyright ©1999-2018 diyAudio
Wiki