search

ocp-power-automation / openshift-install-power

UPI Install helper to deploy OpenShift 4 on IBM Power Systems Virtual Server using Terraform IaC
Apache License 2.0
17 stars 24 forks source link

[BUG] Bastion terminal connection keeps disconnecting frequently #116

Open dpkshetty opened 3 years ago

dpkshetty commented 3 years ago

Describe the bug Connection to my bastion terminal window keeps disconnecting time to time

To Reproduce Open a terminal session to Bastion system (using the ssh cmdline in the output post cluster install) Wait for some time (15-20 mins of no usage) The terminal is hung.. no echo of any keystroke nor Ctrl-C works!

Expected behavior Stable connection to Bastion host

Console Output

[root@deepakcs-ocp-psvs-637a-bastion-0 ~]# client_loop: send disconnect: Connection reset by peer
dpkshetty@DESKTOP-L94HV3O:~$

Desktop (please complete the following information):

Additional context Add any other context about the problem here.

bpradipt commented 3 years ago

@dpkshetty I don't think this is a bug related to the install script. It could be the SSH idle timeout.

dpkshetty commented 3 years ago

@bpradipt I don't see this issue when I use OCP on IBM cloud. Since Bastion gets installed as part of the install script, i was hoping there could be some network params we need to fix to avoid this issue ? If not, where would this belong ?

bpradipt commented 3 years ago

@bpradipt I don't see this issue when I use OCP on IBM cloud. Since Bastion gets installed as part of the install script, i was hoping there could be some network params we need to fix to avoid this issue ? If not, where would this belong ?

When using OCP on IBM Cloud were you connecting to bastion? or you were connecting to the OCP nodes directly ?

For bastion, this is an SSH specific setting and ideally this can be done by end user depending on what kind of host specific settings are needed. Likewise for other bastion specific settings which are not directly related to OpenShift usage.

dpkshetty commented 3 years ago

When using OCP on IBM Cloud were you connecting to bastion? or you were connecting to the OCP nodes directly ?

I was usinfg oc directly from my local terminal

For bastion, this is an SSH specific setting and ideally this can be done by end user depending on what kind of host specific settings are needed. Likewise for other bastion specific settings which are not directly related to OpenShift usage.

Agree, my point is.. it still leaves a bad taste as far as UX goes :) So if we know what SSH setting needs to be used to avoid the frequent disconnects, better to document it so that the overall OCP on PowerVS experience remains good

bpradipt commented 3 years ago

When using OCP on IBM Cloud were you connecting to bastion? or you were connecting to the OCP nodes directly ?

I was usinfg oc directly from my local terminal

You can use the same for OCP in PowerVS (except for locations where port 6443 is blocked over public IP).

For bastion, this is an SSH specific setting and ideally this can be done by end user depending on what kind of host specific settings are needed. Likewise for other bastion specific settings which are not directly related to OpenShift usage.

Agree, my point is.. it still leaves a bad taste as far as UX goes :) So if we know what SSH setting needs to be used to avoid the frequent disconnects, better to document it so that the overall OCP on PowerVS experience remains good

Increasing idle timeout is also considered a bad practice from security stand point. However I'm happy to document it in FAQ.