Re: [RPKI] Tcp keepalives

2021-08-30 Thread Björn Karlsson via RPKI
Yep, that’s the workaround I’ve deployed, more frequent refreshes and this helps since fw state info does not timeout. I had a pretty long refresh time set before (1h) but since I have Routinator refresh timer setup 1h it doesn’t really matter if I decrease the RTR refresh timer. From looking a

Re: [RPKI] Tcp keepalives

2021-08-30 Thread Tony Tauber via RPKI
In some early lab testing I did, I noticed that RTR sessions were often resetting every 10 minutes. The reason I discerned was there was an intervening firewall which must've had a 10 minute auto-flush of stale state info. Rather than trying to fight a losing battle with firewall folks (also with p