<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><br><div><div>On 21 Nov 2013, at 18:56, Naveen <<a href="mailto:pncbose@yahoo.com">pncbose@yahoo.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div><div style="background-color: rgb(255, 255, 255); font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 10pt; position: static; z-index: auto;"><div>Hi,</div><div><br></div><div style="font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">I would like to know if anyone has been successful in loadbalancing Strongswan using LVS so far? It would be great if any notes/direction is pointed.</div><div style="font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">I am trying to load balance
VPN connections and looking for a simple cheap solution (for eg avoiding hardware solutions such as F5). </div><div style="font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">I am not considering DNS based load balancing. <span style="background-color: transparent;">My understanding of Strongswan High availability is that it takes care of handling errors and at this point i dont need that and really not sure if it can solve my loadbalancing requirement.</span></div><div style="font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span style="background-color: transparent;"><br></span></div><div style="font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span style="background-color: transparent;">There are few questions in LVS forum but no specific answers...</span></div><div style="font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span style="background-color: transparent;"><br></span></div><div style="font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span style="background-color: transparent;">thanks in advance</span></div><div style="font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span style="background-color: transparent;">Naveen </span></div></div></div></blockquote><br></div><div>It doesn’t matter witch HA/LoadBalancing you will choose, it can be LVS, Pacemaker or even haproxy before strong swan nodes. The point is how to keep the sessions. You will need to setup virtual IP on your strong swan, there is a Cluster IP.</div><div>More information you can find on the official website: <a href="http://wiki.strongswan.org/projects/strongswan/wiki/HighAvailability">http://wiki.strongswan.org/projects/strongswan/wiki/HighAvailability</a>.</div><div><br></div><div>Thanks,</div><div>Pawel Grzesik</div><br></body></html>