Questions on State Timeouts

[JonathanLee]

Has anyone else custom adapted the default state timeouts for a 2100-MAX?

This seems to work a lot better with gaming and streaming with use of Snort, Squid, Squidguard, and upnp usage.

Let me know what you think.

This one in particular
UDP Multiple 300 Long-lasting bidirectional flows like VoIP, game traffic, or UPnP

[stephenw10]

With timeouts that long you could end up with a lot more states in the table. Potentially you could end up exhausting the RAM. That depends on how much traffic you have of course.

I would watch the state table size for a bit to be sure it doesn't grow too huge.

[JonathanLee]

@stephenw10 what about this is this better?

"Summary of Xbox Timeouts (for optimal gaming experience)
Protocol State Type Recommended Timeout
UDP First 120 seconds
Single 120 seconds
Multiple 120 seconds
TCP Established 86,400 seconds (24 hours)
Closing 900 seconds (15 minutes)
Opening 30 seconds
ICMP First 20 seconds
Error 10 seconds
This setup will provide the best balance of long-lived connections (important for real-time gaming and services like Xbox Live) while still keeping the firewall efficient"

[stephenw10]

If it works better for XBox live then sure.

I don't have one to test so I can't really comment. Just be aware that anything you do to make states last longer is going to increase the total state count at any time. That might be no problem for you with 4G to play with. In many use cases it would be though.