Hi Alan, Thanks for the feedback. I only have the default log of the zombie message, as follow: Mon Nov 6 18:31:03 2017 : Proxy: Marking home server 10.X.Y.Z port 2083 as zombie (it has not responded in 30.000000 seconds). Mon Nov 6 18:31:03 2017 : ERROR: (20792) ERROR: Failing proxied request for user "xxxx@mpf.mp.br", due to lack of any response from home server 10.X.Y.z port 2083 And when i tried to use status-server with RadSec i got the following error: Error: /usr/local/etc/raddb/sites-enabled/tls[145]: Only 'status_check = none' is allowed for home servers with 'proto = tcp' My true problem is that my home_server is up, but for some reason the proxy client thinks its down and marked it as zombie. I think this is related to have two firewalls between proxy client and home server. However, i need the proxy client to detect the connection error quickly and restart the connection. With regards, Neuton Em qui, 9 de nov de 2017 às 16:50, Neuton Martins <notuenmc@gmail.com> escreveu:
Hello,
I am having some problems with zombie proxies using TLS (RadSec) connections im my environment. Seems like the status-server won't work with TLS. What is the right way to solve this? I have tweaked the proxy TLS zombie settings but i am not sure if my settings are good. Here are my home server config distributed to several locations im my mpls network: https://pastebin.com/2nhkAb7D
Thanks.
With regards,
Neuton