TCP Connections might stay in CLOSE_WAIT state for a period of time after receiving FIN-ACK from upstream when HTTP Server Persistence is enabled (default). This should not cause any impact to user experience.
The packet capture below demonstrates an example of the situation where the upstream device sends a FIN-ACK to the proxy.
If the server persistence is not enabled, the sockets will be closed immediately. If it is enabled, once the response for the current transaction is received, the socket will be put into the connection cache for further requests if SG has not received a FIN signal from the server by that time.
Once it is put into the cache, it wont be monitored for any FIN signal from the server and SG will close the connection either when it reaches the persistent timeout or when the subsequent request try to use the socket.
To workaround this :
- disable HTTP Server Persistence
SG8100#(config)http no persistent server
- reduce the HTTP Persistent-timeout Server to a smaller value :
SG8100#(config)http persistent-timeout server ? <# seconds> or 0 to disable
Imported Document ID: 000016968
Subscribing will provide email updates when this Article is updated. Login is required.