Error: F_JG057F: Connection Reset by Peer / Too Many Incoming Connections

Issue

You may encounter one or more of the following issues:

1. While testing the connection to dssagent, you see:
   • F_JG057F TLS negotiation failed: I/O error occurred: Connection reset by peer
2. Capture and Integrate jobs fail with:
   • F_JG0582 TLS negotation failed: No communication
3. Checking the DSS.socket status using the command systemctl status dss.socket reveals a high number of refused connections.
4. After checking the systemd log and the /var/log/messages directory for relevant errors using the commands journalctl -u dss.socket and cat /var/log/messages | grep dss, the following error appears:
   • Too many incoming connections from source, dropping connection.

Environment

• DSS 6
• DSS Agent: Running as a systemctl service

Resolution

To resolve this issue, do the following:

1. Temporarily resolve the issue by running the following commands:

   systemctl daemon-reload
   systemctl reset-failed  # Clear all failed services
   systemctl restart dss.socket  # Restart the DSS socket service
   

2. Prevent systemd from error accounting by modifying the ExecStart parameter in the /etc/systemd/system/dss@.service file. Run the following command, replacing <path_to_dssagent> with the full path to dss_home/bin/dssagent:

   ExecStart=-<path_to_dssagent>
   

3. Reload and restart the service using the following commands:

   systemctl daemon-reload
   systemctl restart dss.socket
   

Cause

systemd tracks non-zero exit statuses or abnormal exits due to signals. After a certain number of failures, it disables the service. As a result, this issue occurs when the number of failed or refused connection attempts exceeds the limit.

Adding the prefix - to the ExecStart parameter disables error accounting in systemd, ensuring only valid connections are counted. This reduces the number of connections counted against the limit, preventing the errors.