PI32603: APNS PUSH NOTIFICATIONS ARE LOST BECAUSE FIREWALLS CLOSE SOCKET CONNECTION

IBM MobileFirst Platform Foundation Interim Fix README for 6.3
IBM Worklight Interim Fix README for 6.2.0.1
IBM Worklight Interim Fix README for 6.1.0.2

APAR status

• Closed as program error.

Error description

• connections to APNS from Worklight server can be dropped by
  the firewall.  WL Server uses persistent socket connections with
  indefinite TimeOut to  communicate with APNS (as recommended by
  APNS).
  When working with APNS notifications it is always recommended
  that the
  firewall  is configured not to drop idle APNS socket
  connections.
  
  additional Keywords :
  APNS ,Push,APNS,FireWall
  
  
  Worklight Versions Affected:
  6.1.x,6.2.x,6.3.x
  
  Initial Impact:
  LOW
  

Local fix

• Configure firewalls rules to keep APNS socket connection open
  and not close down on inactivity
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users of IBM Worklight (MFP) v610 and above , trying to send *
  * Push notifications via APNS (Apple Push Notification         *
  * Service) and have firewalls configured to drop inactive      *
  * socket connections.                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * MobileFirst server uses persistent socket connections with   *
  * indefinite timeout to communicate with APNS (as recommended  *
  * by APNS).                                                    *
  * Many enterprises have their firewalls configured to drop     *
  * open but inactive connections after an interval. At the      *
  * expiry of the interval, abrupt closure of the open socket to *
  * the APNS server is not detected by MobileFirst server (no    *
  * FIN/ACK). Any further push notifications dispatch will try   *
  * using the same socket and fail.                              *
  *                                                              *
  * Logs will show an exception -                                *
  *                                                              *
  * ApnsConnectio I com.notnoop.apns.                            *
  * internal.ApnsConnectionImpl$1MonitoringThread run Exception  *
  * while  waiting for error code                                *
  * java.net.SocketException: Socket is                          *
  * closed                                                       *
  *   at com.ibm.jsse2.SSLSocketImpl.j(SSLSocketImpl.java:778)   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  

Problem conclusion

• Fix has been added to check the socket state and re-initialize
  if closed.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WL/MFPF ENTERPR

• Fixed component ID

  5725I4300

Applicable component levels

• R620 PSY

     UP

• R630 PSY

     UP

• R700 PSY

     UP