WSS agent randomly switching between TCP and UDP protocols
search cancel

WSS agent randomly switching between TCP and UDP protocols


Article ID: 216279


Updated On:


Cloud Secure Web Gateway - Cloud SWG


Roaming users accessing internet via WSS, using the WSS agents

No issues seen establishing connections to WSS from the agent

WSS agent however is not consistent in terms of the transport layer protocol (TCP and UDP) into WSS - uses UDP predominantly but occasionally sees TCP.

Ideally we want to use UDP for performance reasons (better buffering and lower transport layer overhead)


WSS agent

Windows or MacOS platforms


The authentication phase of the tunnel establishment challenges user for credentials, and is done using 100 byte messages within the UDP datagrams. As a result of these small messages, we need quite a few to complete the authentication. If any of these small messages get dropped, and we don't retransmit at the application level fast enough, a switch to TCP will be done automatically.


WSS back end increase the size of the message buffer to be in line with MTU settings and now the authentication can complete within a few packet exchanges. The changes of dropping packets during this exchange are minimised, as is the changes of failing back to TCP because of drops.