Mitigating large ammounts of TCP traffic in the sbc
Hello!
We've been facing a recurrent issue regarding lots of tcp traffic being stuck in the sbc's tcp queue, causing eventual tls service outages.
We've applied several reccomended configuration in order to solve the issue like:
max-incoming-conns 5000
per-src-ip-max-incoming-conns 500
inactive-conn-timeout 120
untrusted-conn-timeout 120
it hasn't proven effectively yet and the tls service outage keeps happening
I thought the network-parameters configuration element was going to help but as I understood from this lines:
"The network-parameters element enables and configures the TCP keepalive
feature used for keeping H.323 connections open."
It only works for H.323, and since we are using SIP whatever configuration unde this element will be uneffective as well, right?