On 23/01/12 20:02, Ivan Pechorin wrote:

> Some VPN boxes are configured to close idle sessions after some
> timeout. Some firewalls are configured to drop idle connections
> ("idle" connection here means no traffic passes through it). For
> instance, if I remember correctly, in popular Cisco ASA firewalls the
> idle timeout is set to 30 minutes by default.
>
> Enabling TCP keepalives with reasonable TCP_KEEPIDLE (like 5 or 15
> min) and TCP_KEEPINTVL usually solves this issue.

This seems to be valid use case for introducing TCP-level keepalives.

>> Moreover, TCP keep-alive interval is set to 2 hours or more (see RFC
>> 1122). Is that sufficient for you?
>
> TCP_KEEPIDLE and TCP_KEEPINTVL should be set to something smaller than
> the default idle timeout in firewalls.

The only problem with this I see is that TCP_KEEPIDLE and TCP_KEEPINTVL 
are not POSIX options. We should check their availability on different 
platforms and  implement the option accordingly.

Martin
_______________________________________________
zeromq-dev mailing list
[email protected]
http://lists.zeromq.org/mailman/listinfo/zeromq-dev

Reply via email to