terminate running connections from cli

[mikeyland1981]

I am looking to see if there is a way to terminate connections from the cli. I am running our MWG 7.8.2.14 as ICAP servers and have noticed that I have several connections that have been open for several days. I would like to be able to close the connections instead of restarting the mwg-core service and effecting other users and their processes. Any ideas if this can be done?

[fw_mon]

Hello @mikeyland1981 

you can use the ss command:

ss -K dst 192.168.10.20 dport = 8080

but first double check that you are not destroying connections intended to be esablished permanently. MWG has a setting ( FirstLongRunCall I belive) to restring long running connection to 24h by default, not sure it being applied to ICAP too.

[aloksard]

Hi,

Hope you are doing well.

Under Configuration->Proxies->Advanced Settings-> We have timeout for errors for long running connections with the value 24 hours.

The Rule to Block on All Errors in Error Handler  should be present/enabled.  If it is switched off which will lead to keeping connections alive for always.  So implementing a long running connection handler is advised  if it is disabled or not present currently.

It works for ICAP as well when MWG is acting as ICAP server.

Was my reply helpful? If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Regards

Alok Sarda