OPNsense Forum

Archive => 22.1 Legacy Series => Topic started by: tomdiks on February 01, 2022, 11:25:29 AM

Title: State not properly closed on time?
Post by: tomdiks on February 01, 2022, 11:25:29 AM
In my local network I've put the inverter for the solar panels in it's own vlan with only access to internet and dns. It is perfectly able to connect to the internet and transmit data to Solax Cloud. But I've to reset it's state every day otherwise won't able to talk to Solax Cloud again. Once I've reset it's state 'let out anything from firewall host itself' the connection is reestablished.
Does anyone know how to fix this behavior?
Title: Re: State not properly closed on time?
Post by: Fright on February 02, 2022, 04:13:09 PM
can you give more details why you think that this state should have been expired?
Title: Re: State not properly closed on time?
Post by: tomdiks on February 02, 2022, 07:17:03 PM
Because of the solar inverter shuts down every day and wakes up the next morning, I'm assuming that the state should be dropped otherwise in this case it's preventing the solar inverter to properly establish a (new) connection the next day. It only makes a good connection after I've manually dropped the previous connection (state). Only then the inverter is showing up in Solax Cloud.
Title: Re: State not properly closed on time?
Post by: Fright on February 02, 2022, 08:25:25 PM
QuoteBecause of the solar inverter shuts down every day and wakes up the next morning
in this case inverter and server should gracefully close tcp session. because if they not, default tcp.established timeout is set to 24H.
imho you can try to change Firewall optimization value to Aggresive in Firewall: Settings: Advanced - this will set tcp.established timeout value to 5H (there are other options, but they are somewhat more complicated imho)
Title: Re: State not properly closed on time?
Post by: tomdiks on February 02, 2022, 09:15:37 PM
Thank you for the suggestion. I've changed the setting into 'aggressive' and I'll let you know if it helps.
Title: Re: State not properly closed on time?
Post by: tomdiks on February 03, 2022, 09:33:12 AM
Good news! Today the solar inverter got online on its own. The previous state was dropped so a new connection could be established this morning. Thanks again for this tip.
Title: Re: State not properly closed on time?
Post by: franco on February 03, 2022, 09:39:17 AM
I have one of those things in the house and the live monitoring through cloud is flaky at best. I wonder if they set out to find the worst TCP stack they could find and slapped it into these solar products?


Cheers,
Franco