Community discussions

MikroTik App
 
HtetNaungShein
just joined
Topic Author
Posts: 3
Joined: Mon Jul 23, 2018 7:00 am

Best Practice to keep TCP session on CCR

Sat Jul 31, 2021 7:22 am

How should keep TCP session (ip>firewall>connection) for best practice? Last than one day or 8hr or something.
 
DarkNate
Forum Veteran
Forum Veteran
Posts: 997
Joined: Fri Jun 26, 2020 4:37 pm

Re: Best Practice to keep TCP session on CCR

Sat Jul 31, 2021 11:23 am

As per this: viewtopic.php?f=23&t=176358

24 hours for TCP established, but the other parameters matters too, check the article.
 
Zacharias
Forum Guru
Forum Guru
Posts: 3459
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Best Practice to keep TCP session on CCR

Sat Jul 31, 2021 11:25 am

But the default timeout of an established TCP connection is already 1 Day...

https://wiki.mikrotik.com/wiki/Manual:I ... n_tracking
 
DarkNate
Forum Veteran
Forum Veteran
Posts: 997
Joined: Fri Jun 26, 2020 4:37 pm

Re: Best Practice to keep TCP session on CCR

Sat Jul 31, 2021 11:50 am

But the default timeout of an established TCP connection is already 1 Day...

https://wiki.mikrotik.com/wiki/Manual:I ... n_tracking
That's as good as it can get without breaking standards and best practices.

Un-active sessions get purged by conn_track regardless.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Best Practice to keep TCP session on CCR

Sun Aug 01, 2021 4:27 am

How should keep TCP session (ip>firewall>connection) for best practice? Last than one day or 8hr or something.
If you explain your needs is better...
For my standard users with CPE: 1 day (and with lease time on DHCP server 7 days)
For hotspot users I set the limit to 1 hour (and with lease time on DHCP server 1 hour)
 
HtetNaungShein
just joined
Topic Author
Posts: 3
Joined: Mon Jul 23, 2018 7:00 am

Re: Best Practice to keep TCP session on CCR

Sat Aug 07, 2021 4:06 pm

thanks for all of your answers.

Who is online

Users browsing this forum: No registered users and 93 guests