Configuration Best Practices

Performance & Scalability

• Run the CLIENT process as a Pathway Server Class. See CLIENT Process Configuration.

• Use configuration files to specify logging options, which allows the options to be changed without re-configuring the server class. See Using Configuration Files.

• Use the monitor option where appropriate, to monitor changes to configuration files. See monitor.

• Do not use diagnostic logging in performance sensitive environments unless absolutely necessary.

• When using TLS connections with HTTP Basic authentication, use the pre-auth option. See http-credentials.

Security

• Change the default administrator password!

• Use Server Certificates and configure only HTTPS console ports.

• Use TLS connections to services whenever possible, both when accessing REST applications and accessing the LightWave Client Console.

• Use the sensitive schema property to avoid disclosing sensitive data in logs. See Sensitive Data Masking.

• Use credentials files to supply configuration credentials. See Using Credentials Files.

• Use Guardian security to appropriately secure API, configuration, credential, and program files.

• Only install the Console in production environments when necessary, or only run the Console in production when necessary. The Console is a development tool and generally not necessary outside of the development environment.