Skip to content

Operating Best Practices

Field-tested guidance for keeping a Xisom box healthy in production. Each section links to the reference page with the full detail. Sections marked Placeholder are being finalized with field data — treat them as direction, not settled numbers.

flowchart LR
  P["Prepare<br/>modelctl"] --> D["Deploy<br/>upload + pair + activate"]
  D --> M["Monitor<br/>latency · throughput · EP"]
  M -->|"drift / new data"| P
  M -->|"version up"| D
  • Validate against the box’s ONNX Runtime version before shipping — pin --target-ort so a too-new opset fails on the workstation, not on the floor.
  • Quantize deliberately. Dynamic INT8 makes models smaller and usually faster, at some accuracy cost — re-validate the quantized model and check prediction quality before it goes live.
  • Pin reproducible bundles (--timestamp) so the artifact on the box matches what you reviewed. See Preparing Models.
  • Match window size × feature count between model and datasource — the platform rejects a mismatched pairing. Record these two numbers with every model.
  • Prefer OPC-UA subscriptions over polling where the server supports them.
  • Use CSV replay to validate a model against recorded data before connecting a live plant source. See Input Datasources.
  • Watch p95/p99 latency, not just the average — tail latency is where edge inference degrades first.
  • An execution-provider fallback to CPU is a regression signal — if a box that should run on TensorRT/CUDA reports CPU, investigate before throughput drops.
  • Live metrics retain for 3 days — export anything you need for longer-term trending. See Monitoring.
  • Keep frontend and backend versions in lockstep — a drift triggers the version-mismatch banner. See Versions & Updates.
  • Stage on the Docker lab before promoting a model or release to a production box. See Docker Lab.
  • Apply least privilege — reserve admin accounts for actions that need them (output test writes, key management); operators sign in as operators.
  • Review the audit trail periodically — it records who accessed the system and when.
  • Terminate TLS at the reverse proxy in front of the dashboard and API, and use authenticated brokers / secured OPC-UA policies for datasources. See Security.