Firewall “idle timeout” & keepalive issues

Firewall’s default idle timeout value is generally 1 hour.
Operating systems generally have 2 hour as default.
We advise to set this 2 hour setting to 20 minutes as below.
But also OS setting may not be sufficient for application disconnect issues, similar keep alive value may also be needed to set at application level itself. We lived a problem at ODI ( Oracle Data Integrator) and after keepalive setting at ODI, issue solved. You will also see ODI setting below.

Feel free to communicate by bulent.yucesoy@gmail.com

OPERATING SYSTEM SETTINGS

AIX	SOLARIS	LINUX	ADVISED VALUE
tcp_keepintvl (half Seconds)	tcp_time_wait_interval (milliseconds)	tcp_keepalive_intvl (seconds)	60 sec.
tcp_keepidle (half Seconds)	tcp_keepalive_interval (milliseconds)	tcp_keepalive_time ( seconds )	20 min.
tcp_keepcnt (integer)	No tunable option	tcp_keepalive_probes (integer)	20 times

APPLICATION SIDE SETTINGS

Ø DCD (dead connection detection) setting at ODI
SQLNET.EXPIRE_TIME=20 in $ORACLE_HOME/network/admin/sqlnet.ora
(Here value 20 means 20 minutes)

Ø If AJP connector exists at your Java app, use this Java option “-Dajp.keepalive=true”