The Lab

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Rejected - packet swallowed
  • Inspected - packet contents passed onto the next stage of inspection
  • Ignored - packet forwarded without any further inspection


OSI LayerRejected Inspected Ignored
DataLink [2]QinQEthernet, VLANeverything else
Network [3]IPv6, IPv4JUMBOIPv4everything else
Transport [4]-TCPeverything else
Application [7]everything elseFIXBGP


Warning
titleMessage Size Restrictions
Ethernet frames are limited to 1540 bytes in size. TCP Max Segment Size is enforced to be at or below 1424.

...

Reflector's parser can return error for a variety of reasons: logon fail, wrong protocol, sanity checks, etc. Some exogenous factors can also call for immediate termination: session timeout, disabled credential, UNPLUG mode, etc. The session store executes this directive by generating a pair of TCP RST frames for each affected session.

Session Drop ReasonSourceExecutorRST GeneratedDescription
TCP_FIN_ACKwireSessionStoreNNormal bilateral TCP termination
TCP_RESETwireSessionStoreNUnilateral (client) TCP reset
LOGIN_FAILwireReflector Risk InstanceYLogon credential check failed
PARSE_ERRORwireReflector FIX Message ParserYMessage syntax error
EXPIREDmetronomeSessionStoreYSession heartbeat expired
SEND_FAIL_LIMITwireSessionStoreNsend() failed too many times 
TRADER_IP_REMOVEDweb serverSessionStoreYAssociated trader IP removed
VENUE_IP_REMOVEDweb serverSessionStoreYAssociated venue IP removed
CREDENTIAL_DISABLEDweb serverReflector Risk InstanceYAssociated credential disabled
GROUP_DISABLEDweb serverReflector Risk InstanceYAssociated risk pool disabled
DEAD_MAN_SWITCHmetronomeReflector Risk InstanceYRisk pool DMS heartbeat expired
SHUTDOWNweb serverReflector Risk InstanceYShutdown command received


Broken Session

If Reflector receives a TCP packet that fits the following requirements, it swallows the packet and generates a TCP RST packet in the reverse direction

...