Excerpt |
---|
Firewalls will often drop idle ssh connections. You , (on your client) and/or your server administrator (on your server), can take steps to ensure connections stay alive and thus are not dropped. |
IT Security Office's info on this, as of March 2016:
--------------------------------------------------
...
Information from Chemistry IT
- On networks with firewalls, such as at Cornell, an ssh connection will be dropped if it remains idle.
- A drop can be prevented by configuring the client and/or server to send a “keep alive” packet so the connection is not strictly idle.
- The idle cut-off time on Cornell's networks is about 5 minutes. Thus, a keep-alive of 4 minutes should suffice.
- In Chemistry IT, we have set all our servers to 4 minutes and that has seemed to work well for our researchers (as of April 2016).