API Gateway tcp-rst-from-server

Products

• CA API Gateway

Issue/Introduction

For a given service in API GW 10.1, we see TCP port reset issue.

Environment

Release : 10.1

Component :

Resolution

You have to add the new firewall rule at the correct line before the portdrop lines otherwise the connection is already dropped before it get to this line .

Run the following command to see the iptables with line numbers

iptables -L --line-numbers

To add the rule before the portdrop lines specify a line number lower than the portdrop lines

for example 

sudo iptables -I INPUT 35 -p tcp --dport 10050 -j ACCEPT

To enter the line at line 35 .

see also :

https://upcloud.com/resources/tutorials/configure-iptables-centos