Skip to content

Commit 52cfb6a

Browse files
Merge pull request #222889 from vhorne/fw-idle-timeout
update statement for Idle Timeout
2 parents 7441e7e + aba4cd3 commit 52cfb6a

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

articles/firewall/firewall-faq.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ metadata:
66
author: vhorne
77
ms.service: firewall
88
ms.topic: conceptual
9-
ms.date: 11/29/2022
9+
ms.date: 01/04/2023
1010
ms.author: victorh
1111

1212
title: Azure Firewall FAQ
@@ -231,7 +231,7 @@ sections:
231231
232232
- question: How does Azure Firewall handle idle timeouts?
233233
answer: |
234-
When a connection has an idle timeout (four minutes of no activity), Azure Firewall gracefully terminates the connection by sending a TCP RST packet.
234+
When a connection has an Idle Timeout (four minutes of no activity), Azure Firewall gracefully terminates the connection by sending a TCP RST packet.
235235
236236
- question: How does Azure Firewall handle VM instance shutdowns during Virtual Machine Scale Set scale in (scale down) or fleet software upgrades?
237237
answer: |
@@ -278,7 +278,7 @@ sections:
278278

279279
- question: What is the TCP Idle Timeout for Azure Firewall?
280280
answer: |
281-
A standard behavior of a network firewall is to ensure TCP connections are kept alive and to promptly close them if there's no activity. Azure Firewall TCP Idle Timeout is four minutes. This setting isn't user configurable, but you can contact Azure Support to increase the idle timeout up to 30 minutes.
281+
A standard behavior of a network firewall is to ensure TCP connections are kept alive and to promptly close them if there's no activity. Azure Firewall TCP Idle Timeout is four minutes. This setting isn't user configurable, but you can contact Azure Support to increase the Idle Timeout for inbound connections up to 30 minutes. Idle Timeout for outbound or east-west traffic cannot be changed.
282282
283283
If a period of inactivity is longer than the timeout value, there's no guarantee that the TCP or HTTP session is maintained. A common practice is to use a TCP keep-alive. This practice keeps the connection active for a longer period. For more information, see the [.NET examples](/dotnet/api/system.net.servicepoint.settcpkeepalive).
284284

articles/firewall/long-running-sessions.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: firewall
55
author: vhorne
66
ms.service: firewall
77
ms.topic: article
8-
ms.date: 10/03/2022
8+
ms.date: 01/04/2023
99
ms.author: victorh
1010
---
1111

@@ -31,7 +31,7 @@ The Azure Firewall engineering team updates the firewall on an as-needed basis (
3131

3232
### Idle timeout
3333

34-
An idle timer is in place to recycle idle sessions. The default value is four minutes. Applications that maintain keepalives don't idle out. If the application needs more than 4 minutes (typical of IOT devices), you can contact support to extend the time to 30 minutes in the backend.
34+
An idle timer is in place to recycle idle sessions. The default value is four minutes. Applications that maintain keepalives don't idle out. If the application needs more than 4 minutes (typical of IOT devices), you can contact support to extent the time for inbound connections to 30 minutes in the backend. Idle timeout for outbound or east-west traffic cannot be changed.
3535

3636
### Auto-recovery
3737

0 commit comments

Comments
 (0)