Connection churn
The connection drops shortly after establishment and then reconnects successfully.
Description
A connection churn is a disconnection that occurs shortly (some seconds) after establishment and then followed by a successful reconnection. Then the connection remains stable. While the first connection seems ok, most of the time, there are no packets received and sent. Once reconnected, packets are ok.
This can be the sign of a software or hardware equipment that does Deep Packet Inspection such as Zscaler, a firewall or a corporate proxy. This could also be due to a late firewall pin-holing. In call cases and if this scenario is repeated, the local network configuration should be reviewed.
What do we do here?
We compute the timestamp of the first and second connections and of the first ICE failure. We mark an observation if there is less than 5 seconds before the first disconnection and if there is a second successful connection.