Wednesday, March 30, 2011

persistent connections within cisco firewall

Our cisco firewall tears down old connections so I sometimes modify the kernel to send keep alives on tcp connections:
[root@server ~]# tail -2 /etc/sysctl.conf
# keep persistent connection (so firewall doesn't tear down)
net.ipv4.tcp_keepalive_time = 900
[root@server ~]#

No comments: