Hi Quanah,

I feel stupid for not having googled "openldap keepalive", and instead write to the list. I have read so much (and seen so many samples) about replication configuration lately, that I thought I did everything correctly.

Thanks for patiently pointing at what I should have been able to find out myself.

MJ

On Wed, 11 Oct 2023 at 16:29, Quanah Gibson-Mount quanah@fast-mail.org wrote:

--On Wednesday, October 11, 2023 4:49 PM +0200 cYuSeDfZfb cYuSeDfZfb cyusedfzfb@gmail.com wrote:

...

Hi,

Of course I add many more details like detailed configs and logs, just ask.

We have a 4-host MMR setup, that all replicate to the three others, relevant snippets from the config:

We wondered what could cause this behaviour, and started thinking in the direction of long-lived tcp connections that perhaps are used in refreshAndPersist functionality. (much like in IMAP idle)

Is anything special needed to make refreshAndPersistwork reliably through firewalls, and across subnets? Does refreshAndPersistwork use (some kind of) long-lived network connections..? Is there a kind of "keepalive" setting that we could try..?

Read the section on keepalive settings. This is a common issue with firewalls and why those settings were introduced. I usually use keepalive=240:10:30 to go under the (usually default) 5 minute disconnect most firewalls have.

--Quanah