[j-nsp] Weird SRX flow timeout issue

[Benny Amorsen]

Tim Eberhard <xmin0s at gmail.com> writes:

> The SRX's behavior is if any packet passes over that session to reset
> the timeout on that session, keep alive, data packet, whatever. As
> long as it matches that session it will reset the timeout to the
> default value and start decrementing again. So I'm not sure what you
> mean when it says dropping tcp sessions with active TCP keepalives.

I proposed using TCP keepalives to keep sessions alive. Julien Goodwin
informed me that this did not work on the SRX, as of a few years ago.

If that is fixed, all is well.

None of which has anything to do with tcp-syn-checking.


/Benny