Docker环境下FIX客户端主动发送FIN断开TLS-TCP连接问题排查

我基于Node.js 16.5版本开发了一个通过TLS-TCP连接远程FIX服务器的客户端，使用Fixparser库。本地环境运行时通信完全正常，但在Docker容器或K8s Pod中运行时，客户端会主动发送FIN报文终止连接，该现象已通过tcpdump捕获。

本地环境tcpdump输出 #

14:05:42.637329 IP zivs-mbp.localdomain.54373 > **************.11501: Flags [S], seq 1574820944, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 852213485 ecr 0,sackOK,eol], length 0
14:05:42.645653 IP **************.11501 > zivs-mbp.localdomain.54373: Flags [S.], seq 2703661640, ack 1574820945, win 65160, options [mss 1400,sackOK,TS val 2245376940 ecr 852213485,nop,wscale 13], length 0
14:05:42.645795 IP zivs-mbp.localdomain.54373 > **************.11501: Flags [.], ack 1, win 2060, options [nop,nop,TS val 852213494 ecr 2245376940], length 0
14:05:42.645907 IP zivs-mbp.localdomain.54373 > **************.11501: Flags [P.], seq 1:346, ack 1, win 2060, options [nop,nop,TS val 852213494 ecr 2245376940], length 345
14:05:42.650097 IP **************.11501 > zivs-mbp.localdomain.54373: Flags [.], ack 346, win 7, options [nop,nop,TS val 2245376947 ecr 852213494], length 0
14:05:43.100363 IP **************.11501 > zivs-mbp.localdomain.54373: Flags [P.], seq 1:1309, ack 346, win 8, options [nop,nop,TS val 2245377347 ecr 852213494], length 1308
14:05:43.100375 IP **************.11501 > zivs-mbp.localdomain.54373: Flags [P.], seq 1309:2084, ack 346, win 8, options [nop,nop,TS val 2245377347 ecr 852213494], length 775
14:05:43.100377 IP **************.11501 > zivs-mbp.localdomain.54373: Flags [P.], seq 1309:2084, ack 346, win 8, options [nop,nop,TS val 2245377363 ecr 852213494], length 775
14:05:43.100617 IP zivs-mbp.localdomain.54373 > **************.11501: Flags [.], ack 2084, win 2027, options [nop,nop,TS val 852213948 ecr 2245377347], length 0
14:05:43.100824 IP zivs-mbp.localdomain.54373 > **************.11501: Flags [.], ack 2084, win 2027, options [nop,nop,TS val 852213948 ecr 2245377363,nop,nop,sack 1 {1309:2084}], length 0
14:05:43.105797 IP zivs-mbp.localdomain.54373 > **************.11501: Flags [P.], seq 346:688, ack 2084, win 2048, options [nop,nop,TS val 852213954 ecr 2245377363], length 342
14:05:43.111169 IP **************.11501 > zivs-mbp.localdomain.54373: Flags [.], ack 688, win 7, options [nop,nop,TS val 2245377407 ecr 852213954], length 0
14:05:43.312914 IP **************.11501 > zivs-mbp.localdomain.54373: Flags [P.], seq 2084:2159, ack 688, win 8, options [nop,nop,TS val 2245377609 ecr 852213954], length 75
14:05:43.313132 IP zivs-mbp.localdomain.54373 > **************.11501: Flags [.], ack 2159, win 2046, options [nop,nop,TS val 852214161 ecr 2245377609], length 0
14:05:43.319529 IP zivs-mbp.localdomain.54373 > **************.11501: Flags [P.], seq 688:885, ack 2159, win 2048, options [nop,nop,TS val 852214167 ecr 2245377609], length 197
14:05:43.324841 IP **************.11501 > zivs-mbp.localdomain.54373: Flags [.], ack 885, win 7, options [nop,nop,TS val 2245377621 ecr 852214167], length 0
14:05:43.526019 IP **************.11501 > zivs-mbp.localdomain.54373: Flags [P.], seq 2159:2324, ack 885, win 8, options [nop,nop,TS val 2245377822 ecr 852214167], length 165
14:05:43.526208 IP zivs-mbp.localdomain.54373 > **************.11501: Flags [.], ack 2324, win 2045, options [nop,nop,TS val 852214374 ecr 2245377822], length 0

Docker容器/K8s Pod环境tcpdump输出 #

16:08:03.787854 IP zivs-mbp.localdomain.63864 > **************.11501: Flags [S], seq 3842572717, win 65535, options [mss 1460,nop,wscale 6,nop,nop,TS val 3635174646 ecr 0,sackOK,eol], length 0
16:08:03.808631 IP **************.11501 > zivs-mbp.localdomain.63864: Flags [S.], seq 303091793, ack 3842572718, win 65160, options [mss 1400,sackOK,TS val 2881452965 ecr 3635174646,nop,wscale 13], length 0
16:08:03.808782 IP zivs-mbp.localdomain.63864 > **************.11501: Flags [.], ack 1, win 2060, options [nop,nop,TS val 3635174667 ecr 2881452965], length 0
16:08:03.811658 IP zivs-mbp.localdomain.63861 > **************.11501: Flags [P.], seq 937292396:937292745, ack 2651197897, win 2060, options [nop,nop,TS val 2622543796 ecr 686022571], length 349

16:08:03.834361 IP **************.11501 > zivs-mbp.localdomain.63861: Flags [.], ack 349, win 7, options [nop,nop,TS val 686029400 ecr 2622543796], length 0
16:08:04.031762 IP **************.11501 > zivs-mbp.localdomain.63861: Flags [P.], seq 1:1309, ack 349, win 8, options [nop,nop,TS val 686029607 ecr 2622543796], length 1308
16:08:04.031766 IP **************.11501 > zivs-mbp.localdomain.63861: Flags [P.], seq 1309:2084, ack 349, win 8, options [nop,nop,TS val 686029607 ecr 2622543796], length 775
16:08:04.031968 IP zivs-mbp.localdomain.63861 > **************.11501: Flags [.], ack 2084, win 2027, options [nop,nop,TS val 2622544016 ecr 686029607], length 0

16:08:04.037704 IP zivs-mbp.localdomain.63861 > **************.11501: Flags [P.], seq 349:691, ack 2084, win 2048, options [nop,nop,TS val 2622544022 ecr 686029607], length 342
16:08:04.043687 IP **************.11501 > zivs-mbp.localdomain.63861: Flags [.], ack 691, win 7, options [nop,nop,TS val 686029623 ecr 2622544022], length 0
16:08:04.254646 IP **************.11501 > zivs-mbp.localdomain.63861: Flags [P.], seq 2084:2159, ack 691, win 8, options [nop,nop,TS val 686029833 ecr 2622544022], length 75
16:08:04.254849 IP zivs-mbp.localdomain.63861 > **************.11501: Flags [.], ack 2159, win 2046, options [nop,nop,TS val 2622544239 ecr 686029833], length 0

16:08:04.266238 IP zivs-mbp.localdomain.63861 > **************.11501: Flags [P.], seq 691:941, ack 2159, win 2048, options [nop,nop,TS val 2622544250 ecr 686029833], length 250
**16:08:04.266489 IP zivs-mbp.localdomain.63861 > **************.11501: Flags [F.], seq 941, ack 2159, win 2048, options [nop,nop,TS val 2622544250 ecr 686029833], length 0**
16:08:04.272919 IP **************.11501 > zivs-mbp.localdomain.63861: Flags [.], ack 941, win 7, options [nop,nop,TS val 686029854 ecr 2622544250], length 0
16:08:04.314057 IP **************.11501 > zivs-mbp.localdomain.63861: Flags [.], ack 942, win 8, options [nop,nop,TS val 686029895 ecr 2622544250], length 0

16:08:04.482047 IP **************.11501 > zivs-mbp.localdomain.63861: Flags [F.], seq 2159, ack 942, win 8, options [nop,nop,TS val 686030060 ecr 2622544250], length 0
16:08:04.482372 IP zivs-mbp.localdomain.63861 > **************.11501: Flags [.], ack 2160, win 2048, options [nop,nop,TS val 2622544466 ecr 686030060], length 0

已尝试的排查操作 #

• 将Node.js版本升级至20（已知Node.js 16.5存在TLS问题）
• 更换基础镜像为Alpine（排查TCP配置差异）
• 使用host网络运行镜像（确保端口开放）
• 将Docker默认MTU降至1200

恳请帮忙分析该问题的原因。

内容的提问来源于stack exchange，提问作者ziv epson