Timeout

This scenario shows how to configure the timeout option in the system offload feature.

Test Expired Offloaded-Flows

Description

In this scenario, the timeout is configured using a low value (only 5 seconds). The default value is 30 seconds. Then, a SSH connection is started from DUT1 to DUT2 to check if the accelerated flow expires after a while.

Scenario

Step 1: Set the following configuration in DUT0:

set interfaces ethernet eth0 address 10.0.0.1/24
set interfaces ethernet eth1 address 20.0.0.1/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system offload timeout 5

Step 2: Set the following configuration in DUT1:

set interfaces ethernet eth0 address 10.0.0.2/24
set protocols static route 0.0.0.0/0 next-hop 10.0.0.1
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Set the following configuration in DUT2:

set interfaces ethernet eth0 address 20.0.0.2/24
set protocols static route 0.0.0.0/0 next-hop 20.0.0.1
set service ssh
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 4: Ping IP address 10.0.0.2 from DUT0:

admin@DUT0$ ping 10.0.0.2 count 1 size 56 timeout 1

Show output

PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data.
64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.304 ms

--- 10.0.0.2 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.304/0.304/0.304/0.000 ms

Step 5: Ping IP address 20.0.0.2 from DUT0:

admin@DUT0$ ping 20.0.0.2 count 1 size 56 timeout 1

Show output

PING 20.0.0.2 (20.0.0.2) 56(84) bytes of data.
64 bytes from 20.0.0.2: icmp_seq=1 ttl=64 time=0.365 ms

--- 20.0.0.2 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.365/0.365/0.365/0.000 ms

Step 6: Init an SSH connection from DUT1 to IP address 20.0.0.2 with the user admin:

admin@DUT1$ ssh admin@20.0.0.2 option StrictHostKeyChecking=no option UserKnownHostsFile=/dev/null

Show output

Warning: Permanently added '20.0.0.2' (ED25519) to the list of known hosts.
admin@20.0.0.2's password:
Welcome to Teldat OSDx v4.1.1.0

This system includes free software.
Contact Teldat for licenses information and source code.

Last login: Wed Jul  3 14:45:43 2024 from 192.168.100.2
admin@osdx$

Step 7: Run command system conntrack show protocol tcp at DUT0 and check if output contains the following tokens:

OFFLOAD

Show output

tcp      6 src=10.0.0.2 dst=20.0.0.2 sport=59228 dport=22 packets=22 bytes=4764 src=20.0.0.2 dst=10.0.0.2 sport=22 dport=59228 packets=26 bytes=5492 [ASSURED] [OFFLOAD, packets=20 bytes=4652 packets=25 bytes=5432] mark=0 use=2
conntrack v1.4.7 (conntrack-tools): 1 flow entries have been shown.

Step 8: Run command system conntrack show protocol tcp at DUT0 and check if output does not contain the following tokens:

OFFLOAD

Show output

tcp      6 3569 ESTABLISHED src=10.0.0.2 dst=20.0.0.2 sport=59228 dport=22 packets=22 bytes=4764 src=20.0.0.2 dst=10.0.0.2 sport=22 dport=59228 packets=26 bytes=5492 [ASSURED] mark=0 use=1
conntrack v1.4.7 (conntrack-tools): 1 flow entries have been shown.

---