News for hackers. Stuff that matters.

A comment on TCP Connection Timeout Mystery. Parent comment

Re:TCP Connection Timeout Mystery by fragmede on Monday March 25, 2024 @05:26PM (#39821435)
That's likely to be an implementation detail of how they've implemented TCP routing across a large fabric.
[ Parent | on HN ]
Re:TCP Connection Timeout Mystery by Hikikomori on Monday March 25, 2024 @06:31PM (#39821977)
AWS doesn't decide or even care about this, customers configure security group rules for their own services. Nothing is allowed by default, so if you want ICMP you would need to allow it, most font bother because it's not that helpful in a cloud environment (can just monitor the TCP port instead and get similar information).
[ Parent | on HN ]
Re:TCP Connection Timeout Mystery by immibis on Monday March 25, 2024 @06:43PM (#39822073)
This explains why some people have problems with IPv6 - if you block IPv6 Control Messages, then it will only work sometimes.
[ Parent | on HN ]