Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Do both tunnels (SSL and DTLS), have to Idle Timeout for the session to be disconnected?

April 26, 2017disconnected dtls idle session SSL timeout tunnels

0

Posted

Do both tunnels (SSL and DTLS), have to Idle Timeout for the session to be disconnected?

1 Answer

0

Posted

A. When a DTLS-Tunnel is active, that is the only tunnel where idle timeout matters. Because very little control channel traffic passes over the SSL-Tunnel, it is almost always idle so it is exempt while there is an active DTLS-Tunnel. If something happened to UDP and the DTLS-Tunnel was torn down, then idle timeout would apply to the SSL-Tunnel. Unfortunately with most Windows computers, they are never truly “idle” so many people think idle timeout is not working. There has been discussion about making a “data threshold” value for idle timeout, but even that could be tricky. In order to make a Windows computer truly idle, you have to remove Microsoft Networking and File and Print Sharing from the Network Config for the computer’s physical interface.