APPENDIX 1: System Config Manager Parameters
Parameter Name | Description | Sample Parameter Value | Restart Required |
|---|---|---|---|
sql.proxy.bind.port | This parameter defines the port range for auto-assigning sql.proxy.bind.port parameter | 1025-2000 | No |
sql.proxy.node.auto.register.enabled | Enables automatic registration of Oracle RAC nodes in SQL proxy | True | No |
dam.ddm.mfa.enabled | Enables Multi-Factor Authentication for SQL Proxy connections. | True | No |
dam.ddm.mfa.delimiter | Defines the delimiter separating the MFA code from the username. | # | No |
sql.proxy.metadata.sync.period | Sets the interval (in ms) for synchronizing database metadata. | 30000 | Yes |
dam.ddm.server.clone.enforce.user.role | Forces read-only access for users connecting via the cloned port. | readonly | No |
dam.ddm.server.enforce.user.groups | Defines user groups required to connect via the main SQL proxy port. | UG1, UG2 | No |
dam.ddm.server.clone.bind-port | Specifies the port for read-only SQL Proxy access. | 1000-4000 | No |
dam.ddm.server.clone.enforce.user.groups | Defines user groups required to connect via the read-only port. | UG3,UG4 | No |
sql.proxy.user.swap.enabled | Enables user identity swapping for SSO in SQL Proxy connections. | True | yes |
aioc.second.password.ttl | Defines TTL for the second password in SSO (in days). | 30 | yes |
sdd.thread.count.default | Sets the default number of parallel connections for sensitive data discovery. | 10 | no |
dam.ddm.buffer.overflow.attack.protection | Turns on the proxy’s buffer-overflow guard. When enabled, every incoming SQL packet is measured and—if it exceeds the size limit below—immediately dropped and logged. | True | yes |
dam.ddm.buffer.overflow.limit | Maximum statement size (bytes). Queries larger than this are blocked. Choose a value that covers normal traffic (e.g., 1048576 = 1 MiB). | 1048576 (1 MiB) | yes |
dam.ddm.dos.attack.protection | Activates DoS / query-flood detection and throttling. Uses the two rate-limit thresholds that follow. | True | yes |
dam.ddm.query.rate.limit.from.single.ip | Per-client threshold—max. queries per second allowed from one source IP before it is temporarily black-listed. | 100 | yes |
dam.ddm.query.rate.limit.from.all.network | Global threshold—aggregate queries per second across the proxy. Exceeding it rejects new sessions until the rate falls. | 5000 | yes |
sql.proxy.oracle.local.bind.port.tenant_aioc | This parameter defines port number of Oracle devices. All Oracle database connections are made through this port. For multitenant environments, the tenant’s name should be entered instead of the aioc. | 5000 | NO |
device.database.source | This parameter defines the external device database IP addresses. Multiple values must be separated by “;”. The parameter is used to add/discover devices from external device databases. | E.g: 10.10.10.10;20.20.20.20 | NO |
device.database.url_n | JDBC URL address for database connection. The parameter is used to add/discover devices from external device databases. | E.g: device.database.url_0 = jdbc:postgresql://10.10.10.10:5432/databasename | YES |
device.database.user_n | External database username. The parameter is used to add/discover devices from external device databases. | E.g.: DB_1 | YES |
device.database.password_n | External database password. The parameter is used to add/discover devices from external device databases. | must be set as "yes" | YES |
device.database.sql_n | SQL Query to import devices. IP address, hostname, element type specifier, and one of the tag values are mandatory. The parameter is used to add/discover devices from external device databases. | E.g: device.database.sql_0 = SELECT "dynName" AS IP_ADDRESS, server AS HOSTNAME, os AS ELEMENT_TYPE_SPECIFIER , id AS PORT, os as TAG_OS, site as TAG_SITE FROM devicedatabase | YES |
device.database.driver_n | Database driver for external database connection. The parameter is used to add/discover devices from external device databases. | E.g.: device.database.driver_0 = org.postgresql.Driverdev | YES |