Hi all,
This is my first post here. I had read a lot of posts before that helped me several times (thank you very much!) but it’s my first time writing something.
I’m facing a problem with one of our customers. He’s using a Bluecoat web proxy with persistent connections to connect to an Apache web server (Linux) on our side. There is a R80.20 gateway between us.
Sometimes, some of the connections become idle and so, our Apache is closing them once the Apache keepalive timeout is over.
When it happens, the Apache server sends a FIN packet that is acknowledged by the remote web proxy. However, the proxy is not sending back its FIN packet. Therefore, the TCP/IP stack of the web server operating system ends closing the socket.
The problem is that in that case, the connection remains in the gateway connections table until the session timeout is over (3600 seconds).
If there is a new connection meanwhile from the remote web proxy using the same source port, the gateway drops it with the following message seen in debug mode: “dropped by fw_handle_old_conn_recovery Reason: TCP packet that belongs to an old connection;”.
I thought that Smart Connection Reuse setting (which is enabled in our gateway) would avoid that kind of situations but maybe I haven’t really understood how it works.
Anyone else had a similar problem ?
Thank you very much for your help.
Regards.
.png "Wolfgang"){kind=avatar}
