Skip to main content
Navigate to Management > System Settings to access the unified System Settings screen. This screen presents all platform configuration parameters, default limits, and system constraints grouped across 8 tabs.
Only users with the Administrator (Admin) role can access this screen. Settings should be configured carefully as they are effective platform-wide.

​
Overview

The unified System Settings page merges General Settings, System Properties (previously managed on separate screens) along with previously undocumented runtime parameters and system constraints into a single interface. Each setting has a scope badge:
ScopeColorDescription
Deploy RequiredOrangeStored in database, API Proxies must be redeployed for changes to take effect
Restart RequiredBlueDefined as environment variable, pod restart required for changes
FixedGrayImmutable infrastructure limit
Editable settings can be modified directly from the screen using appropriate input controls (number, text, toggle, color picker, etc.). Read-only parameters are shown with a lock icon.

​
Tab 1: Routing & Traffic Management

This tab contains settings that control how API requests are routed to backend servers and connection configuration.

​
Connection Settings

ParameterDefaultConfigurable RangeScope
Connect Timeout30 sec1 – 3,600 secDeploy Required
Read Timeout30 sec1 – 3,600 secDeploy Required
Request Timeout3 sec1 – 300 secDeploy Required
Max Redirects500 – 100Deploy Required
Validate After Inactivity2,000 ms—Deploy Required
Idle Timeout30 sec—Deploy Required

​
Connection Pools

PoolPer HostTotalScope
Routing1,0242,048Restart Required
Cache—256Restart Required
Elasticsearch256—Restart Required
API Call2564,096Restart Required
Default HTTP Client128512Restart Required
Additional connection pool parameters:
ParameterDefaultScope
Connection time to live5 minutesRestart Required
Keep-alive duration30 secondsRestart Required
Idle connection eviction30 secondsRestart Required

​
Load Balancing

ParameterDefaultScope
AlgorithmRound RobinDeploy Required
Other optionsLeast Recently Used, Weighted, Random, Pick FirstDeploy Required
User agent value—Deploy Required

​
Redirect

ParameterDefaultScope
Redirect enabled—Deploy Required
Relative redirect allowed—Deploy Required
Disable compression—Deploy Required

​
Retry Policy

ParameterDefaultConfigurable RangeScope
Fixed delay500 ms0 – 60,000 msDeploy Required
Initial delay500 ms0 – 60,000 msDeploy Required
Max delay10,000 ms0 – 300,000 msDeploy Required
Backoff multiplier2.01 – 10Deploy Required

​
Sticky Session

ParameterDefaultConfigurable RangeScope
Cookie name——Deploy Required
Cookie TTL1,800 sec (30 min)0 – 86,400 secDeploy Required
Secure cookie——Deploy Required
HttpOnly——Deploy Required

​
Health Check

ParameterDefaultConfigurable RangeScope
Check interval30 sec5 – 3,600 secDeploy Required
Timeout5 sec1 – 60 secDeploy Required
Failure threshold31 – 20Deploy Required
Success threshold21 – 20Deploy Required

​
Circuit Breaker

ParameterDefaultConfigurable RangeScope
Error window10 sec1 – 3,600 secDeploy Required
Error threshold11 – 10,000Deploy Required
Sleep window10 sec1 – 3,600 secDeploy Required

​
Traffic Mirroring

ParameterDefaultScope
Mirror percentage10%Deploy Required

​
Hop-by-Hop Headers (Read-only)

The following HTTP headers are automatically handled by the gateway during routing and are not forwarded to the backend: Content-Length, Host, User-Agent, TE, Trailers, Transfer-Encoding, Upgrade
These headers are classified as hop-by-hop per HTTP/1.1 RFC 2616 and must be regenerated by proxy servers.

​
Tab 2: Protocol Configuration

This tab contains settings specific to different protocol types (gRPC, WebSocket, HTTP/2).

​
gRPC Routing (Deploy Required)

ParameterDefaultConfigurable RangeScope
Inbound message size16 MB1 KB – 256 MBDeploy Required
Metadata size8 KB1 KB – 16 MBDeploy Required
Per-RPC buffer1 MB1 KB – 256 MBDeploy Required
Keep-alive time120 sec—Deploy Required
Keep-alive timeout20 sec—Deploy Required
Channel idle timeout5 min—Deploy Required
Retry attempts50 – 100Deploy Required
Hedged attempts50 – 100Deploy Required
Trace events——Deploy Required

​
gRPC Server (Restart Required, Read-only)

ParameterDefaultScope
Message size4 MBRestart Required
Keep-alive time2 hoursRestart Required
Max header list size8 KBRestart Required
Connection max age1 hourRestart Required
Connection max age grace30 secRestart Required
Idle connection timeout5 minRestart Required
Handshake timeout20 secRestart Required
Permit keep-alive time5 minRestart Required
Thread pool sizeCPU × 2Restart Required

​
WebSocket Routing (Deploy Required)

ParameterDefaultScope
Connection lost timeout30 secDeploy Required
Reuse address—Deploy Required
Connect timeout10 secDeploy Required
Retry count3Deploy Required
Auto reconnect—Deploy Required

​
WebSocket Server (Restart Required, Read-only)

ParameterDefaultScope
Idle timeout60 secRestart Required
Buffer size64 KBRestart Required
TCP NoDelaytrueRestart Required

​
HTTP/2 (Restart Required, Read-only)

ParameterDefaultScope
HTTP/2 enabledfalseRestart Required

​
Tab 3: Security & Access Control

​
Authentication & Session

ParameterDefaultScope
Captcha attempts allowed3Deploy Required
User lock attempts allowed7Deploy Required
Idle time92,000 secDeploy Required
Idle timeout5 secDeploy Required

​
JDK TLS/SSL Settings (Restart Required, Read-only)

ParameterDescriptionScope
Disabled AlgorithmsAlgorithms disabled in TLSRestart Required
CertPath Disabled AlgorithmsAlgorithms disabled in certificate path validationRestart Required
Enabled TLS VersionsTLSv1, TLSv1.1, TLSv1.2, TLSv1.3Restart Required
Cipher Suites24 different cipher suitesRestart Required
Allow Unsafe ProtocolsJVM-level security settingRestart Required

​
CORS (Restart Required, Read-only)

ParameterDefaultScope
Allow origin*Restart Required
Allow credentialstrueRestart Required
Allow methods*Restart Required
Allow headers*Restart Required
Max age3600Restart Required

​
X-Forwarded-For (Restart Required, Read-only)

ParameterDefaultScope
IP header nameX-Forwarded-ForRestart Required
OrderrightmostRestart Required

​
XML Security (Fixed, Read-only)

FeatureStatusDescription
DTDDisabledProtection against XXE attacks
External entitiesDisabledPrevents external resource loading
Entity expansionDisabledProtection against billion laughs attack
XIncludeDisabledPrevents external file inclusion

​
Tab 4: Logging & Monitoring

​
Traffic Log Body Limits

ParameterDefaultScope
From client body25 MBDeploy Required
To backend body25 MBDeploy Required
From backend body25 MBDeploy Required
To client body25 MBDeploy Required
Elasticsearch query buffer25 MBDeploy Required

​
Policy Log

ParameterDefaultScope
Execution log body1 MBDeploy Required
Executable detail limit1 KBDeploy Required

​
Log Retention

Log retention settings determine storage duration and maximum record counts for different log types. Separately configurable for all log types (traffic, application, token, audit, login).

​
Metrics (Restart Required, Read-only)

ParameterDefaultScope
Metrics enabledfalseRestart Required

​
Tab 5: Data Processing & Limits

​
SOAP Sample Generation

ParameterDefaultScope
Max element count1,000Deploy Required
Max nesting depth15Deploy Required
Max size25 KBDeploy Required

​
REST-SOAP Conversion Limits

These limits determine the maximum values accepted by the JSON parser during REST-to-SOAP conversion.
ParameterDefaultScope
Max string length20,000,000Deploy Required
Max nesting depth1,000Deploy Required
Max number length1,000Deploy Required

​
Reporting & Export

ParameterDefaultScope
Excel export limit10,000 recordsDeploy Required
Report generator max records10,000 recordsDeploy Required
Traffic log preview100 rowsDeploy Required
Email attachment size25 MBDeploy Required

​
UI Display Limits

ParameterDefaultScope
UI body display limit5 MBDeploy Required
Test console file upload5 MBDeploy Required
Test console request body5 MBDeploy Required
Test console response body5 MBDeploy Required

​
Multipart Upload (Restart Required, Read-only)

ParameterDefaultScope
Max file size100 MBRestart Required
Max request size100 MBRestart Required
File size threshold10 MBRestart Required

​
System Size Constraints (Read-only)

ConstraintValueDescription
MongoDB document size16 MBBSON document size limit, cannot be changed
Elasticsearch max result window10,000Default result window limit
Audit log reference object15 MBDue to MongoDB 16 MB limit

​
Tab 6: Gateway Runtime

All parameters in this tab are Restart Required scoped and read-only. To change them, define as environment variables and restart the pod.

​
Undertow Thread Pool

ParameterDefaultDescription
Worker ThreadsCPU × 8Worker thread count
Worker Max ThreadsCPU × 16Maximum worker thread count
IO ThreadsCPU countI/O thread count

​
Undertow Buffers

ParameterDefaultDescription
Buffer Size16 KBBuffer size
TCP Backlog1,000TCP connection queue
Max Concurrent Request0 (unlimited)Max concurrent requests
Max Queue Size0 (unlimited)Max queue size
Direct BufferstrueDirect memory buffers

​
Undertow Timeouts

ParameterDefaultDescription
Read Timeout0 (unlimited)Read timeout
Streaming Read Timeout0 (unlimited)Streaming read timeout
No Request Timeout60 secIdle connection timeout

​
Virtual Threads

ParameterDefaultDescription
Routing VT enabledtrueVirtual threads for routing
Logging VT enabledtrueVirtual threads for logging

​
Async Executor

ParameterDefaultDescription
Core pool size2Core pool size
Max pool size100Maximum pool size
Queue capacity10,000Queue capacity

​
General

ParameterDefaultDescription
Log levelINFOApplication log level
CharsetUTF-8Default character encoding
Deployment timeout30 secWorker deployment timeout
Cluster name—Cluster name

​
Default Ports (Fixed, Read-only)

PortDescription
8080API Gateway HTTP
8090Cache Server
8091Management API
8443API Gateway HTTPS
8092gRPC
8094WebSocket
9091Undertow Admin

​
Tab 7: Cache & Clustering

All parameters in this tab are Restart Required scoped and read-only.

​
Hazelcast Threads

ParameterDefaultDescription
Operation thread count—Operation threads
Generic thread count—General-purpose threads

​
Partitioning

ParameterDefaultDescription
Partition count271Hazelcast partition count

​
Map Configuration

ParameterDefaultDescription
Max entries10,000Maximum entries per map
Backup count1Synchronous backups
Async backup count0Asynchronous backups
Read backup datatrueRead from backup copies

​
Write-Behind

ParameterDefaultDescription
Write delay5 secBatch write interval
Batch size100Records per write batch
CoalescingtrueMerge same-key writes
Queue capacity100,000Write queue size

​
Networking

ParameterDefaultDescription
Heartbeat interval5 secHeartbeat period
Max no heartbeat60 secHeartbeat timeout
Socket keep alivetrueSocket keep alive
Socket no delaytrueTCP NoDelay

​
Timeouts

ParameterDefaultDescription
Operation call timeout60 secOperation timeout
Backup timeout5 secBackup operation timeout

​
Serialization

ParameterDefaultDescription
Native byte ordertruePlatform byte order
IO write throughfalseDirect write

​
Map Loading

ParameterDefaultDescription
Chunk size10,000Bulk load chunk size
Batch size10,000Bulk load step

​
Tab 8: Platform

​
Deployment

ParameterDefaultScope
History revision count6Deploy Required

​
Correlation ID

ParameterDefaultScope
Correlation ID header nameAPINIZER-CORRELATION-IDDeploy Required
The correlation ID header name is currently fixed and cannot be changed. This value is used for distributed tracing between requests.

​
User Interface Constants

The following limits are hardcoded in the UI and cannot be changed from the system settings screen:
LimitDefault
Pagination10 records (options: 10 / 25 / 50 / 100)
Portal pagination20 records
Test timeout10 seconds
Notification duration5 seconds
Logo/favicon upload5 MB
API product file upload2 MB
Bulk import100 MB
Password length4 – 100 characters

​
MCP (Portal WebSocket)

ParameterDefaultConfiguration
Max concurrent connections100YAML
Session timeout5 minutesYAML
Rate limit100 requests per minuteYAML

​
Saving Changes

Use the Apply Changes button in the top-right corner of the screen to save changes. The system saves changes to different data sources separately:
  • Deploy Required (DB) settings are instantly distributed to all nodes
  • Restart Required settings require the relevant pod to be restarted
  • Fixed values are read-only and cannot be changed
Changing some settings (for example API Root Context) may require a platform restart.