CSM : closing of session (idle timeout > RST)

[pkovilic]

Hi,

When a connection is terminated due to the idle timeout expiration, the CSM send back a reset (RST) to the client. Is there a way to modify this behaviour (> CSM sends nothing !) ?

Pascal

[Gilles Dufour · Accepted solution]

you could use an idle timeout of 0 [latest version only] to disable this functionality.

But, the reason we use an idle timeout is to protect resources from misbehavior.

If an attacker decides to send you millions of SYN, without an idle timeout the CSM will not free the resources until the attacker sends a FIN or RESET.

Gilles.