Forum Discussion

rohitbarolia_28's avatar
rohitbarolia_28
Icon for Nimbostratus rankNimbostratus
Jun 20, 2017

Timeout Change to 15 min.

I am trying to change the timeout from default 300 seconds to 15 min (900 seconds) using an i-rule.

 

VIP details are as follows - Type - Standard Vip port - 3389 Persistence Profile - Type - Microsoft® Remote Desktop, timeout - 300 seconds.

 

I-rule used - when CLIENT_ACCEPTED { set IP::idle_timeout 900 }

 

Result - tmsh show sys conn cs-server-addr x.x.x.x cs-server-port 443 all-properties - It still shows timeout of 300 seconds.

 

Please suggest of persistence timeout is taking precedence or is there an issue with the i-rule.

 

application delivery
LTM
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jun 20, 2017

    Hi,

    syntax is 

    IP::idle_timeout 900
    and not 
    set IP::idle_timeout 900

    look at this example:

    when CLIENT_ACCEPTED {
    if {[IP::protocol] == 17 && [UDP::local_port] == 53} { IP::idle_timeout 30 }
    elseif {[IP::protocol] == 6 && [TCP::local_port] == 3389} { IP::idle_timeout 1800 }
}

    you can also use a dedicated tcp protocol with expected timeout values.

  • dragonflymr's avatar
    dragonflymr
    Icon for Cirrostratus rankCirrostratus
    Jun 20, 2017

    Hi,

     

    When testing new setting did you check if existing TCP connection (using timeout set in TCP profile) expired?

     

    Remember that this change will be applied only to new TCP connection, existing one will use old one.

     

    Piotr