[9.165][BUG] RED50 reconnects all the time

Hi there,

my RED50 is reconnection all the time, maybe someone can have look on that?

2013:11:11-00:02:10 firewall red_server[30133]: SELF: New connection from 93.1.2.3 with ID A34007ADuswusw (cipher RC4-SHA), rev1
2013:11:11-00:02:11 firewall red_server[30133]: A34007ADuswusw: connected OK, pushing config
2013:11:11-00:02:11 firewall red_server[30133]: A34007ADuswusw: Sending PEERS+10.10.251.10
2013:11:11-00:02:14 firewall red_server[30133]: A34007ADuswusw: command 'UMTS_STATUS value=OK'
2013:11:11-00:02:14 firewall red_server[30133]: A34007ADuswusw: command 'PORTSTATE 1E04,1004,1004,1004,1004'
2013:11:11-00:02:14 firewall red_server[30133]: A34007ADuswusw: PORTSTATE LAN1: Down,LAN2: Down,LAN3: Down,LAN4: Down
2013:11:11-00:02:14 firewall red_server[30133]: A34007ADuswusw: command 'PING 0 uplink=WAN'
2013:11:11-00:02:14 firewall red_server[30133]: id="4201" severity="info" sys="System" sub="RED" name="RED Tunnel Up" red_id="A34007ADuswusw" forced="0"
2013:11:11-00:02:14 firewall red_server[30133]: A34007ADuswusw: PING remote_tx=0 local_rx=0 diff=0
2013:11:11-00:02:14 firewall red_server[30133]: A34007ADuswusw: PONG local_tx=0
2013:11:11-00:02:45 firewall red_server[30133]: A34007ADuswusw: No ping for 30 seconds, exiting.
2013:11:11-00:02:45 firewall red_server[30133]: id="4202" severity="info" sys="System" sub="RED" name="RED Tunnel Down" red_id="A34007ADuswusw" forced="0"
2013:11:11-00:02:45 firewall red_server[30133]: A34007ADuswusw is disconnected.
2013:11:11-00:02:54 firewall redctl[30205]: 10.10.41.61 =
2013:11:11-00:02:54 firewall redctl[30205]:   10.10.41.61
2013:11:11-00:05:43 firewall red_server[30552]: SELF: New connection from 93.1.2.3 with ID A34007ADuswusw (cipher RC4-SHA), rev1
2013:11:11-00:05:43 firewall red_server[30552]: A34007ADuswusw: connected OK, pushing config
2013:11:11-00:05:43 firewall red_server[30552]: A34007ADuswusw: Sending PEERS+10.10.251.10
2013:11:11-00:05:46 firewall red_server[30552]: A34007ADuswusw: command 'UMTS_STATUS value=OK'
2013:11:11-00:05:46 firewall red_server[30552]: A34007ADuswusw: command 'PORTSTATE 1E04,1004,1004,1004,1004'
2013:11:11-00:05:46 firewall red_server[30552]: A34007ADuswusw: PORTSTATE LAN1: Down,LAN2: Down,LAN3: Down,LAN4: Down
2013:11:11-00:05:46 firewall red_server[30552]: A34007ADuswusw: command 'PING 0 uplink=WAN'
2013:11:11-00:05:46 firewall red_server[30552]: id="4201" severity="info" sys="System" sub="RED" name="RED Tunnel Up" red_id="A34007ADuswusw" forced="0"
2013:11:11-00:05:46 firewall red_server[30552]: A34007ADuswusw: PING remote_tx=0 local_rx=0 diff=0
2013:11:11-00:05:46 firewall red_server[30552]: A34007ADuswusw: PONG local_tx=0
2013:11:11-00:06:17 firewall red_server[30552]: A34007ADuswusw: No ping for 30 seconds, exiting.
2013:11:11-00:06:17 firewall red_server[30552]: id="4202" severity="info" sys="System" sub="RED" name="RED Tunnel Down" red_id="A34007ADuswusw" forced="0"
2013:11:11-00:06:17 firewall red_server[30552]: A34007ADuswusw is disconnected.
2013:11:11-00:06:27 firewall redctl[30624]: 10.10.41.61 =
2013:11:11-00:06:27 firewall redctl[30624]:   10.10.41.61
2013:11:11-00:09:16 firewall red_server[30941]: SELF: New connection from 93.1.2.3 with ID A34007ADuswusw (cipher RC4-SHA), rev1
2013:11:11-00:09:17 firewall red_server[30941]: A34007ADuswusw: connected OK, pushing config
2013:11:11-00:09:18 firewall red_server[30941]: A34007ADuswusw: Sending PEERS+10.10.251.10
2013:11:11-00:09:20 firewall red_server[30941]: A34007ADuswusw: command 'UMTS_STATUS value=OK'
2013:11:11-00:09:20 firewall red_server[30941]: A34007ADuswusw: command 'PORTSTATE 1E04,1004,1004,1004,1004'
2013:11:11-00:09:20 firewall red_server[30941]: A34007ADuswusw: PORTSTATE LAN1: Down,LAN2: Down,LAN3: Down,LAN4: Down
2013:11:11-00:09:20 firewall red_server[30941]: A34007ADuswusw: command 'PING 0 uplink=WAN'
2013:11:11-00:09:20 firewall red_server[30941]: id="4201" severity="info" sys="System" sub="RED" name="RED Tunnel Up" red_id="A34007ADuswusw" forced="0"
2013:11:11-00:09:20 firewall red_server[30941]: A34007ADuswusw: PING remote_tx=0 local_rx=0 diff=0
2013:11:11-00:09:20 firewall red_server[30941]: A34007ADuswusw: PONG local_tx=0
2013:11:11-00:09:51 firewall red_server[30941]: A34007ADuswusw: No ping for 30 seconds, exiting.
2013:11:11-00:09:51 firewall red_server[30941]: id="4202" severity="info" sys="System" sub="RED" name="RED Tunnel Down" red_id="A34007ADuswusw" forced="0"
2013:11:11-00:09:51 firewall red_server[30941]: A34007ADuswusw is disconnected.
2013:11:11-00:10:01 firewall redctl[31012]: 10.10.41.61 =C9B023 is disconnected.
2013:11:11-00:10:01 firewall redctl[31012]:   10.10.41.61
2013:11:11-00:12:50 firewall red_server[31320]: SELF: New connection from 93.1.2.3 with ID A34007ADuswusw (cipher RC4-SHA), rev1
2013:11:11-00:12:50 firewall red_server[31320]: A34007ADuswusw: connected OK, pushing config
2013:11:11-00:12:50 firewall red_server[31320]: A34007ADuswusw: Sending PEERS+10.10.251.10
2013:11:11-00:12:53 firewall red_server[31320]: A34007ADuswusw: command 'UMTS_STATUS value=OK'
2013:11:11-00:12:53 firewall red_server[31320]: A34007ADuswusw: command 'PORTSTATE 1E04,1004,1004,1004,1004'
2013:11:11-00:12:53 firewall red_server[31320]: A34007ADuswusw: PORTSTATE LAN1: Down,LAN2: Down,LAN3: Down,LAN4: Down
2013:11:11-00:12:53 firewall red_server[31320]: A34007ADuswusw: command 'PING 0 uplink=WAN'
2013:11:11-00:12:53 firewall red_server[31320]: id="4201" severity="info" sys="System" sub="RED" name="RED Tunnel Up" red_id="A34007ADuswusw" forced="0"
2013:11:11-00:12:53 firewall red_server[31320]: A34007ADuswusw: PING remote_tx=0 local_rx=0 diff=0
2013:11:11-00:12:53 firewall red_server[31320]: A34007ADuswusw: PONG local_tx=0
2013:11:11-00:13:24 firewall red_server[31320]: A34007ADuswusw: No ping for 30 seconds, exiting.
2013:11:11-00:13:24 firewall red_server[31320]: id="4202" severity="info" sys="System" sub="RED" name="RED Tunnel Down" red_id="A34007ADuswusw" forced="0"
2013:11:11-00:13:24 firewall red_server[31320]: A34007ADuswusw is disconnected.
2013:11:11-00:13:34 firewall redctl[31427]: 10.10.41.61 =
2013:11:11-00:13:34 firewall redctl[31427]:   10.10.41.61
2013:11:11-00:16:25 firewall red_server[31865]: SELF: New connection from 93.1.2.3 with ID A34007ADuswusw (cipher RC4-SHA), rev1
2013:11:11-00:16:25 firewall red_server[31865]: A34007ADuswusw: connected OK, pushing config
2013:11:11-00:16:25 firewall red_server[31865]: A34007ADuswusw: Sending PEERS+10.10.251.10

Thanks
Robert

0 Astaro Beta Bot over 11 years ago

Thanks for reporting. We are now tracking this as Mantis ID #29356
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 11 years ago

The Mantis ID #29356 is now under investigation.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Reanimator over 11 years ago

Hello Robert,

Thanks for coming back with the issue.

The problematic thing is that the connection is cannot be established:
2013:11:11-00:06:17 firewall red_server[30552]: A34007ADuswusw: No ping for 30 seconds, exiting.

This could be due several reasons:
1. Routing rules are not correct in 3rd party equipment configuration.
2. There is bug in routing code on RED.

Could you please provide more info:
- Network plan and data path
-- What kind of equipment you are using?
- Did the problem exist before the upgrade to 9.2?
- Have you done any network related changes in last time?
- I see in the log what you are using failover over UMTS.
-- If it is correct, please try the RED without the UMTS failover configuration.

Regards,
Aleks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Alex76 over 11 years ago in reply to Reanimator
i think its the same bug like here:

https://community.sophos.com/products/unified-threat-management/astaroorg/f/80/t/65146

i had the same if i connect the red to a LTE Modem from the Mobil Provider A1 via Network cable.

The Problem itself is:
No ping for 30 seconds, exiting.

There is a bad logic in the Timeout code. For example:

long lastLiveTime=0;

function connect(){
   // register RED
}

function read(){
    lastLiveTime=System.currentTimeMillis();
    .....
}

function write(){
    lastLiveTime=System.currentTimeMillis();
    .....
}

function boolean live(){
     if(System.currentTimeMillis()>lastLiveTime+30*1000){
          log.info("No ping for 30 seconds, exiting.");
          disconnect();
          return false;
     }
     return true;
}

if the next live check, is before the lastLiveTime variable was set to the current time, you have exact this kind of situation.

Normaly this will not be a problem, because the read and write is quick and can set the lastLiveTime in time. But if this need a litte bit longer time, like a GSM/UMTS/LTE connection the RED can not connect, because it will throw away to quickly.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Robert Tausend over 11 years ago in reply to Alex76

Could you please provide more info:
- Network plan and data path
-- What kind of equipment you are using?
- Did the problem exist before the upgrade to 9.2?
- Have you done any network related changes in last time?
- I see in the log what you are using failover over UMTS.
-- If it is correct, please try the RED without the UMTS failover configuration.

Regards,
Aleks

Hi Aleks,

are there any news at this? I still have this Problem [:(]

- Network should be known to you now? if not, let me know.
- UTM on VMWare with a DSL25MBit Line and a RED50
- no, the Problem startet with 9.2 beta
- no
- same problem without failover

Robert
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 11 years ago

We are planning to release a fix for this issue in Version 9.200.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 11 years ago

We are planning to release a fix for this issue in Version 9.201.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 11 years ago

The Mantis ID #29356 is now closed.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel