This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN good - but shell dies after 1 hour plus

Dear NG,

i am running a VPN to a customer. I can do a ssh to the customer. I can work for one hour. Unfortunately the shell hangs and i have to kill the shell, because it is dead. This error occurs after 1 hour or more. Sometimes after 2 hours.

Does anybody has an idea?

This thread was automatically locked due to age.

Parents

0 Krischeu over 18 years ago

This workaround works fine:

ssh -2 -o ServerAliveInterval=40 -X

It sends keepalive packets.
Cancel
Vote Up 0 Vote Down

Cancel
0 Krischeu over 18 years ago in reply to Krischeu

Did anyone know this wether this is a feature of astaro or a bug?
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 18 years ago in reply to Krischeu

SSH has a timeout that will kill the session because of inactivity.
Cancel
Vote Up 0 Vote Down

Cancel
0 drees over 18 years ago in reply to NimmdirKeks

It's not ssh, it's the stateful firewalls or routers somewhere between (and sometimes including) the enpoints of the connections which drop idle connections.

You can enable the ServerAliveInterval and also make sure that TCPKeepAlive is enabled (that should be enabled by default) in /etc/ssh/ssh_config to turn those options on each time without having to specify any options on the command line to work around these issues.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 drees over 18 years ago in reply to NimmdirKeks

It's not ssh, it's the stateful firewalls or routers somewhere between (and sometimes including) the enpoints of the connections which drop idle connections.

You can enable the ServerAliveInterval and also make sure that TCPKeepAlive is enabled (that should be enabled by default) in /etc/ssh/ssh_config to turn those options on each time without having to specify any options on the command line to work around these issues.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Krischeu over 18 years ago in reply to drees

Should this be done on the firewalls or on the clients?
If i connect 2 Astaro and i am using the vpn-tunnel, i can use ssh as long as i want. This problem with disconnecting occurs only if i am connection to anybody outside the astaro.
Cancel
Vote Up 0 Vote Down

Cancel
0 drees over 18 years ago in reply to Krischeu

You should enable the ssh keep alive settings on the clients.
Cancel
Vote Up 0 Vote Down

Cancel
0 Krischeu over 18 years ago in reply to drees

Thanks drees,
this solved the issue.
Cancel
Vote Up 0 Vote Down

Cancel