Network Flow Default Settings

Default settings impacting network flows traversing Trustgrid devices

Timeouts

The table below details the time the Trustgrid network process waits before terminating a flow. Flows are matched based on the IP tuple (source ip, source port, destination ip, destination port).

ProtocolStatesTime(seconds)Description
TCPSYN_SENT, SYN_RECEIVED15Covers flows that have not yet completed a 3-way TCP handshake. e.g. (SYN, SYN/ACK, ACK)
TCPCLOSE_WAIT, TIME_WAIT, FIN_WAIT60Covers flows that have started the TCP close process.
TCPESTABLISHED900Covers established flows. The connection must be idle for the entire 15 minutes (900 s) for this timeout to be applied.
UDPnot applicable60Covers all UDP flows as the protocol is stateless
ICMPnot applicable5Covers all ICMP flows as the protocol is stateless

Virtual Network Routes are only evaluated when a flow is first created. If you modify VPN routes after a flow is established, it will not impact existing flows. If you have an application that reuses the same IP tuple then you will need to make sure it is inactive long enough for the appropriate timeout to occur.