Hello,
I am able to reproduce an issue with my Docker NetXMS scripts. The method of reproducing is simply done by keeping the encrption flag on when establishing to NetXMS daemon. The main issue is that it fails to connect 95% of the time.
I -do not- always get this response:
java.net.SocketTimeoutException: connect timed out
It is almost as though the connection is -stuck- or the state of the encryption is not completed (fragmented or MTU issue?)
When encryption is turned off, it works 100%
Question:
Is there a mandatory/recommended MTU setting for incoming NetXMS / NXShell clients?
At any given time, on any given mobile-network, the MTU may be 1400, 1304 or 1500. It also may be a combination of the three due to multiple tunnels.
I have tried MSS Advert on the interface and a few other things, but.. It's difficult to repeat on -all- systems because their MTU is dynamic etc.. hard to diagnose. I have a combo of cjdns, ipsec and tls tunnels at any given time. The common denominator is it always works when nxshell -Dnetxms.encryptSession=false .. temporary fix is to keep the nxshell command in loop until it is successful.
NetXMS is amazingly fast, efficient and flexible. Thank you for the hard work, blood, sweat, tears etc..
-broski
I am able to reproduce an issue with my Docker NetXMS scripts. The method of reproducing is simply done by keeping the encrption flag on when establishing to NetXMS daemon. The main issue is that it fails to connect 95% of the time.
I -do not- always get this response:
java.net.SocketTimeoutException: connect timed out
It is almost as though the connection is -stuck- or the state of the encryption is not completed (fragmented or MTU issue?)
When encryption is turned off, it works 100%
Question:
Is there a mandatory/recommended MTU setting for incoming NetXMS / NXShell clients?
At any given time, on any given mobile-network, the MTU may be 1400, 1304 or 1500. It also may be a combination of the three due to multiple tunnels.
I have tried MSS Advert on the interface and a few other things, but.. It's difficult to repeat on -all- systems because their MTU is dynamic etc.. hard to diagnose. I have a combo of cjdns, ipsec and tls tunnels at any given time. The common denominator is it always works when nxshell -Dnetxms.encryptSession=false .. temporary fix is to keep the nxshell command in loop until it is successful.
NetXMS is amazingly fast, efficient and flexible. Thank you for the hard work, blood, sweat, tears etc..
-broski