Amazon FSx for NetApp ONTAP NTFS connectivity to Domino Data Lab

Publication date: October 27, 2026 (Diagram history)

Domino Data Lab creates volumes that use the UNIX security style on Amazon FSx for NetApp ONTAP. This architecture shows how to convert those volumes to the NTFS security style. Domino runs on Amazon Elastic Kubernetes Service (Amazon EKS) and keeps NFS access to the volumes. Users can also access the same data directly over SMB.

Amazon FSx for NetApp ONTAP NTFS diagram

The following steps describe the architecture:

Users primarily access, generate and modify data stored in FSx for ONTAP / Domino through the Domino application access in their web browser.
The Elastic Load Balancing directs user traffic to the Amazon EKS clusters based on availability to Domino nodes.
The Domino application connects to FSx for ONTAP through Trident managed volumes with NFS. Domino uses a service account to access the data.
Users can also access Domino data stored in FSx for ONTAP directly from their local machine over the SMB protocol. Users can create, edit, and delete files.
To authenticate users who connect directly to FSx for ONTAP, the storage virtual machine (SVM) is joined to Microsoft Active Directory, and Active Directory security groups are applied to the volume.
You can integrate other external data sources into Domino. These data sources can be in the same VPC, in another VPC, in other clouds, or on premises. To connect them, use VPC peering, AWS Transit Gateway, or AWS Direct Connect. You can also use an internet gateway or a VPN connection.
Domino Data Lab uses AWS Secrets Manager, Amazon Elastic Container Registry (Amazon ECR), and Amazon Route 53. These services help it manage, secure, and deploy its resources.