Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Bastion terminal connection keeps disconnecting frequently #116

Open
dpkshetty opened this issue Dec 29, 2020 · 5 comments
Open

[BUG] Bastion terminal connection keeps disconnecting frequently #116

dpkshetty opened this issue Dec 29, 2020 · 5 comments
Labels
bug Something isn't working

Comments

@dpkshetty
Copy link
Contributor

dpkshetty commented Dec 29, 2020

Describe the bug
Connection to my bastion terminal window keeps disconnecting time to time

To Reproduce
Open a terminal session to Bastion system (using the ssh cmdline in the output post cluster install)
Wait for some time (15-20 mins of no usage)
The terminal is hung.. no echo of any keystroke nor Ctrl-C works!

Expected behavior
Stable connection to Bastion host

Console Output

[root@deepakcs-ocp-psvs-637a-bastion-0 ~]# client_loop: send disconnect: Connection reset by peer
dpkshetty@DESKTOP-L94HV3O:~$

Desktop (please complete the following information):

  • OS: Ubuntu 20.04
  • Version 20.04
  • Windows terminal : WSL Ubuntu

Additional context
Add any other context about the problem here.

@dpkshetty dpkshetty added the bug Something isn't working label Dec 29, 2020
@bpradipt
Copy link
Contributor

@dpkshetty I don't think this is a bug related to the install script. It could be the SSH idle timeout.

@dpkshetty
Copy link
Contributor Author

@bpradipt I don't see this issue when I use OCP on IBM cloud. Since Bastion gets installed as part of the install script, i was hoping there could be some network params we need to fix to avoid this issue ? If not, where would this belong ?

@bpradipt
Copy link
Contributor

bpradipt commented Jan 4, 2021

@bpradipt I don't see this issue when I use OCP on IBM cloud. Since Bastion gets installed as part of the install script, i was hoping there could be some network params we need to fix to avoid this issue ? If not, where would this belong ?

When using OCP on IBM Cloud were you connecting to bastion? or you were connecting to the OCP nodes directly ?

For bastion, this is an SSH specific setting and ideally this can be done by end user depending on what kind of host specific settings are needed. Likewise for other bastion specific settings which are not directly related to OpenShift usage.

@dpkshetty
Copy link
Contributor Author

When using OCP on IBM Cloud were you connecting to bastion? or you were connecting to the OCP nodes directly ?

I was usinfg oc directly from my local terminal

For bastion, this is an SSH specific setting and ideally this can be done by end user depending on what kind of host specific settings are needed. Likewise for other bastion specific settings which are not directly related to OpenShift usage.

Agree, my point is.. it still leaves a bad taste as far as UX goes :) So if we know what SSH setting needs to be used to avoid the frequent disconnects, better to document it so that the overall OCP on PowerVS experience remains good

@bpradipt
Copy link
Contributor

bpradipt commented Jan 4, 2021

When using OCP on IBM Cloud were you connecting to bastion? or you were connecting to the OCP nodes directly ?

I was usinfg oc directly from my local terminal

You can use the same for OCP in PowerVS (except for locations where port 6443 is blocked over public IP).

For bastion, this is an SSH specific setting and ideally this can be done by end user depending on what kind of host specific settings are needed. Likewise for other bastion specific settings which are not directly related to OpenShift usage.

Agree, my point is.. it still leaves a bad taste as far as UX goes :) So if we know what SSH setting needs to be used to avoid the frequent disconnects, better to document it so that the overall OCP on PowerVS experience remains good

Increasing idle timeout is also considered a bad practice from security stand point. However I'm happy to document it in FAQ.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants