Linux SSH Session Idle Timeout & Automatic

๐Ÿ’ก Linux SSH Session Idle Timeout & Automatic โ€” Executive Summary

Technical architectural analysis, practical configuration manifests, and deployment instructions for Linux SSH Session Idle Timeout & Automatic.

RHEL

vi /etc/ssh/sshd_config

bash
# ํด๋ผ์ด์–ธํŠธ๋กœ๋ถ€ํ„ฐ ๋ฐ์ดํ„ฐ๋ฅผ ๋ฐ›์ง€ ๋ชปํ•œ ๊ฒฝ์šฐ sshd(8)๊ฐ€ ํด๋ผ์ด์–ธํŠธ๋กœ๋ถ€ํ„ฐ ์‘๋‹ต์„ ์š”์ฒญํ•˜๊ธฐ ์œ„ํ•ด ์•”ํ˜ธํ™”๋œ ์ฑ„๋„์„ ํ†ตํ•ด ๋ฉ”์‹œ์ง€๋ฅผ ๋ณด๋‚ด๋Š” ์‹œ๊ฐ„ ์ดˆ๊ณผ ๊ฐ„๊ฒฉ์„ ์ดˆ ๋‹จ์œ„๋กœ ์„ค์ •ํ•ฉ๋‹ˆ๋‹ค. 
# ๊ธฐ๋ณธ๊ฐ’์€ 0์ด๋ฉฐ ์ด๋Ÿฌํ•œ ๋ฉ”์‹œ์ง€๊ฐ€ ํด๋ผ์ด์–ธํŠธ์— ์ „์†ก๋˜์ง€ ์•Š์Œ์„ ๋‚˜ํƒ€๋ƒ…๋‹ˆ๋‹ค. 
# ์ด ์˜ต์…˜์€ ํ”„๋กœํ† ์ฝœ ๋ฒ„์ „ 2์—๋งŒ ์ ์šฉ๋ฉ๋‹ˆ๋‹ค.
ClientAliveInterval

# sshd(8)๊ฐ€ ํด๋ผ์ด์–ธํŠธ๋กœ๋ถ€ํ„ฐ ๋ฉ”์‹œ์ง€๋ฅผ ๋‹ค์‹œ ์ˆ˜์‹ ํ•˜์ง€ ์•Š๊ณ  ๋ณด๋‚ผ ์ˆ˜ ์žˆ๋Š” ํด๋ผ์ด์–ธํŠธ ํ™œ์„ฑ ๋ฉ”์‹œ์ง€(์•„๋ž˜ ์ฐธ์กฐ)์˜ ์ˆ˜๋ฅผ ์„ค์ •ํ•ฉ๋‹ˆ๋‹ค. 
# ํด๋ผ์ด์–ธํŠธ ํ™œ์„ฑ ๋ฉ”์‹œ์ง€๊ฐ€ ์ „์†ก๋˜๋Š” ๋™์•ˆ ์ด ์ž„๊ณ„๊ฐ’์— ๋„๋‹ฌํ•˜๋ฉด sshd๋Š” ํด๋ผ์ด์–ธํŠธ ์—ฐ๊ฒฐ์„ ๋Š๊ณ  ์„ธ์…˜์„ ์ข…๋ฃŒํ•ฉ๋‹ˆ๋‹ค. 
# ํด๋ผ์ด์–ธํŠธ ํ™œ์„ฑ ๋ฉ”์‹œ์ง€์˜ ์‚ฌ์šฉ์€ TCPKeepAlive(์•„๋ž˜)์™€ ๋งค์šฐ ๋‹ค๋ฅด๋‹ค๋Š” ์ ์— ์œ ์˜ํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. 
# ํด๋ผ์ด์–ธํŠธ ํ™œ์„ฑ ๋ฉ”์‹œ์ง€๋Š” ์•”ํ˜ธํ™”๋œ ์ฑ„๋„์„ ํ†ตํ•ด ์ „์†ก๋˜๋ฏ€๋กœ ์Šคํ‘ธํ•‘ํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค. 
# TCPKeepAlive์— ์˜ํ•ด ํ™œ์„ฑํ™”๋œ TCP keepalive ์˜ต์…˜์€ ์Šคํ‘ธํ•‘์ด ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. 
# ํด๋ผ์ด์–ธํŠธ ํ™œ์„ฑ ๋ฉ”์ปค๋‹ˆ์ฆ˜์€ ํด๋ผ์ด์–ธํŠธ ๋˜๋Š” ์„œ๋ฒ„๊ฐ€ ์—ฐ๊ฒฐ์ด ๋น„ํ™œ์„ฑํ™”๋œ ์‹œ๊ธฐ๋ฅผ ์•„๋Š” ๋ฐ ์˜์กดํ•  ๋•Œ ์œ ์šฉํ•ฉ๋‹ˆ๋‹ค. 
# ๊ธฐ๋ณธ๊ฐ’์€ 3์ž…๋‹ˆ๋‹ค. 
# ClientAliveInterval(์•„๋ž˜ ์ฐธ์กฐ)์ด 15๋กœ ์„ค์ •๋˜๊ณ  ClientAliveCountMax๊ฐ€ ๊ธฐ๋ณธ๊ฐ’์œผ๋กœ ๋‚จ์•„ ์žˆ๋Š” ๊ฒฝ์šฐ, ์‘๋‹ตํ•˜์ง€ ์•Š๋Š” SSH ํด๋ผ์ด์–ธํŠธ๋Š” ์•ฝ 45์ดˆ ํ›„์— ์—ฐ๊ฒฐ์ด ๋Š์–ด์ง‘๋‹ˆ๋‹ค. 
# ์ด ์˜ต์…˜์€ ํ”„๋กœํ† ์ฝœ ๋ฒ„์ „ 2์—๋งŒ ์ ์šฉ๋ฉ๋‹ˆ๋‹ค.
ClientAliveCountMax
Consists of 10 minutes
Method 1
bash
ClientAliveInterval 5m # 5๋ถ„
ClientAliveCountMax 2 # 2๋ฒˆ
---

service sshd restart
Method 2
bash
ClientAliveInterval 10m # 10๋ถ„
ClientAliveCountMax 0 # 0ํšŒ
---

service sshd restart
If the above method does not work

Connection to 100.0.0.220 closed by remote host.

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *