Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    All Connections consistently dropped every 60 minutes

    Firewalling
    1
    2
    739
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      duanes
      last edited by

      On a clean and simple install (single Wan, transparent NAT port 80, squid proxy ssl.), I am seeing a consistent drop of ALL active tcp connections every 60 minutes.  The specific time seems to be every 60 mins based on the last reboot time, ie, this is not a timed event based on an hourly event.  In the cron service, there are two "updatetable" functions that occur every */60 minutes to clear ssh lockouts and antivirus entries, but I tried disabling those to no avail.

      Googling revealed several posts indicating that there may be a tcp_Timeout in BSD of 3600 seconds, but the info seems sketchy.  I search sysctl net.inet and found only two entries that might align and those were net.inet.tcp.keepidle=7200000 and net.inet.tcp.hostcache.expire=3600.  I modified both of those, but there was no change in the drops.

      The problem is that there is a 20-30 second "outage" every hour and the users are getting annoyed by this.

      Suggestions??

      1 Reply Last reply Reply Quote 0
      • D
        duanes
        last edited by

        Interesting - I have not been able to find any timers, but I did find that this problem does not impact any connections that are simply NAT'd, only connections via Squid.

        That led to this:
        http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-HD-Limitation-td1567406.html

        My system is similar to the one in the article (Xeon Quad core with 4GB RAM and 100GB for caching). They say that this is likely a garbage collection and index rebuild issue.  I changed my cache high and low settings to be 1% apart. - waiting to see impact.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.