[DISPATCH-987] With policy enabled connections are not closed properly

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Cannot Reproduce
• Affects Version/s: 1.0.1, 1.1.0
• Component/s: Container, Policy Engine
• Assignee: Unassigned
• Reporter: Charles E. Rolke
• Created: 03/May/18 22:07
• Updated: 27/Nov/19 20:10
• Resolved: 27/Nov/19 20:10

Description

Running a connection torture test that repeatedly opens a connection as far as sending an AMQP Open performative and then closing the connection cleanly results in the router only half-closing the TCP connection.

A network trace with no policy. Note that the router acks the client FIN at the end.

No.	Time	Protocol	Info (without vhost policy)
43	2.541095986	TCP	34294 → 5672 [SYN]
44	2.541136228	TCP	5672 → 34294 [SYN, ACK]
45	2.541160415	TCP	34294 → 5672 [ACK]
46	2.541380992	AMQP	Protocol-Header 1-0-0 open
47	2.541395296	TCP	5672 → 34294 [ACK]
48	2.541730395	AMQP	Protocol-Header 1-0-0 open
49	2.541745841	TCP	34294 → 5672 [ACK]
50	2.541872178	AMQP	close
51	2.541929756	AMQP	close
52	2.541978491	TCP	5672 → 34294 [FIN, ACK]
53	2.541982519	TCP	34294 → 5672 [FIN, ACK]
54	2.541990280	TCP	5672 → 34294 [ACK]
55	2.541996003	TCP	34294 → 5672 [ACK]

A network trace with policy. Note that the router does not ACK the client FIN at the end.

No	Time	Protocol	Info (with vhost policy)
7	1.466184854	TCP	34334 → 5672 [SYN]
8	1.466204022	TCP	5672 → 34334 [SYN, ACK]
9	1.466214404	TCP	34334 → 5672 [ACK]
10	1.466311860	AMQP	Protocol-Header 1-0-0 open
11	1.466318152	TCP	5672 → 34334 [ACK]
12	1.466973480	AMQP	Protocol-Header 1-0-0 open
13	1.466986519	TCP	34334 → 5672 [ACK]
14	1.467125609	AMQP	close
15	1.467242524	AMQP	close
16	1.467333770	TCP	34334 → 5672 [FIN, ACK]
17	1.467356742	TCP	5672 → 34334 [FIN, ACK]
18	1.467363647	TCP	34334 → 5672 [ACK]

A client program for proton cpp examples is available here:

https://github.com/ChugR/qpid-proton/blob/PROTON-1842/cpp/examples/amqp-open-close.cpp

Config for the router and a permissive policy are attached.