[OpenAFS] Re: client behind NAT firewall
Thu, 7 Aug 2014 12:46:52 -0500
On Wed, 06 Aug 2014 15:33:02 -0400
Dale Pontius <email@example.com> wrote:
> Obviously this was client side, but I find it hard to believe that
> keeping a connection mapped for the 2 hours mentioned elsewhere would
> be necessary.
Maybe not "necessary", but at least in the past it was possible for
fileserver -> client communication to occur several hours after the last
client -> fileserver communication. Jaap Winius found this by
experimenting with the port mapping timeouts on his equipment:
The reasoning I think I had for that (it's somewhere in there) was that
various probes only happen when we have callbacks recorded for a
particular client or fileserver. With no callbacks, no probes occur, so
we can go a long time without any communication. And even with no
callbacks, there are a few situations where a fileserver can try to
contact a client again. I haven't looked at this area in a long time,
though; I may have that wrong.
This situation should be better now than it was when that thread was
made. But I'm just mentioning that to show that the idea of
hours-long-mappings is not unheard-of.