The client has a system service availability requirement below. Originally, I was hoping we can run multiple Mango instances behind a load balancer like you were thinking, but this is not available yet. Can we come up with a fail-over design which we can quickly fail-over to a passive instance when the primary Mango instance goes down?
- System Service Availability
5.1 The service availability should meet 99.5% of the time, where "Service Availability" is defined as the total time in hours in a month for which the system can be connected and accessed, divided by the total service time in hours in a month (which is equal to the number of calendar days multiplied by 24 hours).
5.2 The maximum Down Time for the System per day should be 0.75 hour and the maximum Accumulated Down Time over a calendar month should be 3.65 hours where:
"Down Time" is defined as the period for which the System CANNOT be accessed, other than due to maintenance and /or upgrade carried out
"Accumulated Down Time" is defined as the accumulated number of hours of down time in a calendar month. This number will be reset to zero at the beginning of each calendar month
5.3 The maintenance window shall be agreed with the Employer after project commencement. Normally it shall be aligned with non-traffic hour of the Station.
I am trying to implement an data aquisition system for an enterprise client. However, the client has some security requirements that I think Mango may not compile. I would like to seek your advise and see if there is an work around.
1.1. The password, if stored in the system, should be stored in a one-way salted hash.
1.2. The system shall enforce strong password at least 8 characters long with reasonably complex composition.
1.3. The system shall enforce period change of password of user accounts.
1.4. The system shall prevent brute-force password attack. [Comply by editing rateLimit.* in env.properties?]
1.5. The system shall provide a secure mechanism for user password reset self-service. [Comply with "Forgot password" in login page?]
1.6. Security events of user account activities shall be logged and kept for at least 3 months including [Comply with event log?]:
- Successful and failed logon
- Lockout (if any)
- Change and reset of password
The logs shall contain information like source IP, user name, timestamp etc.
I would like to know if it is possible to configure Mango so that the Duration field can be shown in the format of W:X:Y:Z (W days X hours Y minutes Z seconds) in the Events page.
For example, instead of showing (1) a few seconds, (2) 16 hours, (3) 24 minutes, etc, it will show (1) 00:00:00:03, (2) 00:00:16:15, (3) 00:00:24:12.
So does HTTP Receiver still works after enabling SSL setting in https://help.infiniteautomation.com/installation-configuration/?rq=SSL#ssl-properties?
Is it possible to setup HTTP Receiver to receive encrypted HTTP POST?