|
From: Felipe W. <fel...@gm...> - 2024-05-30 22:14:55
|
Dear QFJ Community, I hope this message finds you well. I am currently exploring the possibility of configuring a QuickFIX/J (QFJ) acceptor that allows connections over the internet. Given the security implications, I would greatly appreciate your guidance on best practices and any suggestions you might have. Here is the approach I am considering: 1. Firewall Configuration: Only allow connections from whitelisted IP addresses to ensure that only trusted clients can reach the acceptor application. 2. Mutual TLS (mTLS): Implement mTLS for client and server authentication, ensuring that both parties are verified via certificates. 3. Encrypted Data: Use SSL/TLS to encrypt all data transmitted over the FIX session. 4. Session Password: Require a password for the FIX session to add an additional layer of security. I believe that combining these measures will provide a robust security framework for our QFJ acceptor. However, I am seeking confirmation from the community and any additional recommendations you might have. Thank you in advance for your time and assistance. Best regards, Felipe Windmoller |