Re: Difference between ServerAliveInterval and TCPKeepAlive?

From: Richard E. Silverman (res_at_qoxp.net)
Date: 01/23/05

  • Next message: Konrad LUDWIKOWSKI: "Re: plink and vncviewer"
    Date: 23 Jan 2005 01:47:10 -0500
    
    

    >>>>> "David" == David Deutsch <sptest@71broadway.info> writes:

        David> Could someone give me a quick explanation of the difference
        David> between these two (I have already read the man page)? I'm
        David> trying to a) keep my NAT from timing out my connection, and B)
        David> terminate the process asap if the NAT *does* time it out (so
        David> that I can detect it and restart the process).

    TCPKeepAlive is not SSH-specific; it simply sets the "keep-alive" option
    on the underlying TCP connection. TCP keepalive is not intended to keep
    anything alive, as in avoiding NAT timeouts. Rather, it detects and reaps
    half-dead TCP connections to prevent them from building up over time. It
    typically operates over too long a time scale to be useful in defeating
    NAT timeout, and that scale is usually only tunable for the whole TCP
    stack, not per-connection.

    ServerAliveInterval controls keepalive messages which are sent within the
    SSH protocol; since they are application-level and hence tunable
    per-connection, this is what you want to use.

    -- 
      Richard Silverman
      res@qoxp.net
    

  • Next message: Konrad LUDWIKOWSKI: "Re: plink and vncviewer"

    Relevant Pages

    • Re: "inbox closed due to access error" message
      ... On 27 Aug 2008 david read the comp.mail.pine post of Steve Hubert, ... in Alpine 1 and now in Alpine 2. ... A guess is that it is probably related to a NAT between you and the ... and that NAT is closing the connection after some amount of ...
      (comp.mail.pine)
    • Re: Processs PreciseMail AntiSpam Gateway - any experience so far ?
      ... Client sending system ... >> ISP using dynamic NAT with port overloading. ... >> 10.11.12.1 is the clients real address and it opens a connection from its port ...
      (comp.os.vms)
    • Re: WinRoute Pro
      ... If a RST is sent to a TCP protocol host, ... 1/ Check the NAT table. ... 2/ Open a TCP connection to a host using a port tool. ... Winroute's logs are no substitute for a decent packet sniffer. ...
      (comp.security.firewalls)
    • Re: Establish external trust over a NAT device
      ... suggesting hardware over Windows built-in functionality for a VPN solution. ... even a fairly cheap router will likely have much better throughput ... L2TP and routing over it with or without NAT on that connection. ...
      (microsoft.public.win2000.active_directory)
    • Re: NAT and keepaliveopen connection over TCP
      ... sent after 10 minutes of inactivity on the TCP connection. ... There's no minimum set time how long a NAT router should ... time-out inactive connections at the server. ...
      (microsoft.public.win32.programmer.networks)