<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10pt"><div id="yiv2345094417"><div><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 10pt;"><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10">Thanks Martin.</div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10"><br clear="none"></div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10" style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">I should have mentioned this earlier - use case is like this:</div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10">few thousand iOS clients connecting to 'n' Strongswan nodes. For
now i am not worried about node failure. Once node fails, client needs to reconnect. </div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10"><br clear="none" id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_49"></div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10" style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent;"><span id="yiv2345094417yui_3_13_0_ym1_1_1385145848284_4112" style="font-style:italic;"><span id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_62" style="font-family: monospace;">"To clarify, our HA solution works on top of ClusterIP, but does not work </span><span id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_59" style="font-family: monospace;">with any generic load-balancing solution. It does load-sharing itself, </span><span id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_56"
style="font-family: monospace;">and is capable of migrating live IPsec tunnels between cluster nodes."</span></span><br clear="none" id="yiv2345094417yui_3_13_0_ym1_1_1385145848284_4064"></div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10" style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">Since i dont have need for handling node-failure, i am kind of ignoring HA solution for now. Also its mentioned that HA is limited to 2 nodes - which i am 100% sure of - is it limited to 2 load balancing nodes ?</div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10" style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><br clear="none"
id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_68"></div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10" style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent;"><span id="yiv2345094417yui_3_13_0_ym1_1_1385145848284_5222" style="font-style:italic;"><span id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_84" style="font-family: monospace;">"Alternatively, you may use a third party
load-balancing solution, but </span><span id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_81" style="font-family: monospace;">then without our HA plugin. You get all the benefits from that solution, </span><span id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_78" style="font-family: monospace;">but it won't synchronize IPsec state, requiring connected clients to </span><span id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_71" style="font-family: monospace;">reconnect after a node failure."</span></span><br clear="none" id="yiv2345094417yui_3_13_0_ym1_1_1385145848284_4896"></div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10" style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">As mentioned earlier, i am ok with reconnect on node failure. This is where i am planning to use LVS and is looking for
help for setting up. Any ideas/thoughts would be helpful.</div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10" style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">From my current understanding, one idea is to mark the incoming packets and use LVS-DR. Does any one have a working setup with this ?</div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10" style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><br clear="none" id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_88"></div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10" style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;
background-color: transparent; font-style: normal;">regards</div><div id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_10" style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">Naveen</div><div class="yiv2345094417yqt2822620607" id="yiv2345094417yqt02099"><div class="yiv2345094417yahoo_quoted" id="yiv2345094417yui_3_13_0_ym1_7_1385145848284_18" style="display: block;"><div class="yiv2345094417yui_3_13_0_ym1_1_1385145848284_2924" id="yiv2345094417yui_3_13_0_ym1_1_1385145848284_5514" style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 10pt;"><div class="yiv2345094417yui_3_13_0_ym1_1_1385145848284_2925" id="yiv2345094417yui_3_13_0_ym1_1_1385145848284_5513" style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size:
12pt;"><div class="yiv2345094417y_msg_container" id="yiv2345094417yui_3_13_0_ym1_1_1385145848284_5512"><br clear="none"><br clear="none"></div> </div> </div> </div></div> </div></div></div></div></body></html>