You would have to send some keep-alives, perhaps dummy OPTION requests.
Even if your firewall would not drop active TCP connections, SER drops
them too -- drop time is subject to configuration and current TCP load.
Despite that I think that the first place to work on is your firewall
congiguration. Closing traffic to a server seems to me like a suboptimal
idea.
-jiri
At 08:57 AM 8/7/2004, Jamie Yukes wrote:
Suggesting a shorter re-REGISTER interval would solve a
problem that
exists between the UA and the proxy....
Our problem is between a proxy and another proxy. We control one
proxy and the other proxy is with the ITSP. The TCP connection exists
during a live call. The other proxy sends TCP "null packet" keep
alives every 15 seconds... however, our firewall does not apply them
to the session activity timer on our outbound connection. We would
need to send TCP "null packet" keep alives to keep our firewall
session activity timer from lapsing, and losing session control.
Should I implement this via an external FIFO interface, that
enumerates active call sessions every 15 seconds, and write a
component that will send "null packet" on each connection? Should I
extend something like the tm module?
Appreciatively,
Jamie Yukes
On Fri, 6 Aug 2004 22:53:30 -0500, Michael Shuler <mike(a)bwsys.net> wrote:
Make the client reregister on a short interval
i.e. 60 seconds. This works
quite well for us.
----------------------------------------
Michael Shuler, C.E.O.
BitWise Systems, Inc.
682 High Point Lane
East Peoria, IL 61611
Office: (217) 585-0357
Cell: (309) 657-6365
Fax: (309) 213-3500
E-Mail: mike(a)bwsys.net
Customer Service: (877) 976-0711
-----Original Message-----
From: serusers-bounces(a)lists.iptel.org
[mailto:serusers-bounces@lists.iptel.org] On Behalf Of Jamie Yukes
Sent: Friday, August 06, 2004 10:42 PM
To: serusers(a)lists.iptel.org
Subject: [Serusers] Keep Alives? SO_KEEP_ALIVE? TCP Null packet?
I use TCP for my SIP connections. I have noticed other proxy servers
send TCP "null packet" keep-alives during a connection. What is the
feasibility of doing something like this in SER? Where would you
steer someone who would consider implementing?
In particular this would solve a firewall issue related to "inactivity
timeout". (UAC and UAS don't support Session Timers)
Jamie Yukes
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers
Jamie Yukes
Global Connect
http://www.gc1.com/
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers