Server connect disconnect after exactly 1 minute

[sanggkaitoo]

I have a weird issue that session connects to server of teleport disconnect after 1 minute if I do nothing although I had config in teleport.yaml that:
client_idle_timeout: never.
I also set up sshd_config like this:

ClientAliveInterval  1200
ClientAliveCountMax 3

If I set up client_idle_timeout_message: "" It doesn't show message when disconnected:
sang.phung@ip-10-0-203-108:~$ disconnected
I don't know why, so could anyone help me with this issue?

[webvictim]

The fact that it's exactly 1 minute suggests it's a 60 second timeout being enforced somewhere. How is your Teleport cluster configured? Do you have a load balancer or stateful firewall in front of Teleport, or on the connection that you're using to connect to Teleport?

[sanggkaitoo]

And if I ssh directly from terminal, It doesn't disconnect after 1 minutes

[webvictim]

I'm afraid this doesn't really provide enough information for me to be able to help.

Please answer these questions:

• How is Teleport deployed?
• Is there a load balancer, stateful firewall, WAF, proxy server or anything similar between your browser and the Teleport server?
• Can you use the Network Inspector in the browser's Developer Tools to see what network traffic is happening at the same time as the disconnection occurs?

[sanggkaitoo]

• I deployed Teleport in AWS EC2 instance and ran teleport service and listening at port 443.
• I use an alb to forward requests to instance because I need to use https and my domain in route 53
• When I use Network Inspector in Edge it does not have anything but many files: status {message: "ok"} and session {sessions: [{kind: "ssh", id: "fc210bca-e3a4-4370-80a6-b9d22957a811", namespace: "default",…}]}

[webvictim]

The default timeout on an Application Load Balancer is 60 seconds as detailed here: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/application-load-balancers.html#connection-idle-timeout

I suggest raising this to 350 seconds.

[sanggkaitoo]

It's work. Thanks you so muchhhhhhhh

[sanggkaitoo]

Hi @webvictim, I don't know but now, my teleport auto disconnect after about ~45 second although I've set Idle timeout of load balancer up to 4000s and have this config in teleport.yaml:

client_idle_timeout: never
session_control_timeout: 15m

Can you help me again?

[webvictim]

It sounds like the load balancer timeout isn't configured in the way you think it is. 4000 seconds is way too long - 400 seconds would be fine as Teleport will send a keepalive packet every 5 minutes by default.

If this doesn't help, please share Teleport auth/proxy logs from the time of the event.