[OpenAFS] Re: UDP timeouts

Andrew Deason adeason@sinenomine.net
Mon, 9 May 2011 10:25:37 -0500


On Mon, 09 May 2011 11:03:42 -0400
Jeffrey Altman <jaltman@secure-endpoints.com> wrote:

> The port number used is irrelevant.  The question is whether the
> firewall or NAT keeps the port open or not.  There is no guarantee
> that a client will use port 7001 either.  That is simply the standard
> port.

Yes, but it seems unlikely that a client that is using 7001 would need
keepalives to keep a port mapping active. It's not perfect, but I was
just trying to think of a way of reducing the potentially huge increase
in unnecessary traffic (and CheckHost_r delays) for sites that don't
have any NAT clients and don't care.

But if it doesn't matter, then sure, turn it on always.

> The file server can use rx NatPing on the callback connection.  It
> just shouldn't be conditional on a port number.

NatPing I'd be more comfortable with turning on unconditionally, since
we don't wait for a response or anything and it's just a single packet.

-- 
Andrew Deason
adeason@sinenomine.net