<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Tobias,<br>
</p>
<div class="moz-cite-prefix">On 18.11.2020 12:49, Tobias Brunner
wrote:
</div>
<blockquote type="cite"
cite="mid:8c1f8b55-dd3d-4450-80e6-b5723ac8e325@strongswan.org">
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">I'm using call to swanctl in updown script in order to distinguish
between deleting connection and IKE rekeying, checking for existence of
IKE session and, thus, trying to avoid unnecessary changes to the network:
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
You can't detect IKE rekeying from the updown script as no updown event
is generated during it. If you are referring to reauthentication, it
might be easier to do refcounting.</pre>
</blockquote>
<p>Sorry for the error in terminology - sure, I'm about
reauthentication. In current model I'm getting interface up/down
every negotiated reauth time, like this:</p>
<pre>Nov 18 02:42:53 vpnhost updown: Deleting interface upon down-client event for 'doka'
Nov 18 02:42:56 vpnhost updown: Creating interface upon up-client event for 'doka'
Nov 18 02:43:07 vpnhost updown: Deleting interface upon down-client event for 'doka'
Nov 18 02:43:15 vpnhost updown: Creating interface upon up-client event for 'doka'
Nov 18 06:42:54 vpnhost updown: Deleting interface upon down-client event for 'doka'
Nov 18 06:42:57 vpnhost updown: Creating interface upon up-client event for 'doka'
Nov 18 06:43:07 vpnhost updown: Deleting interface upon down-client event for 'doka'
Nov 18 06:43:15 vpnhost updown: Creating interface upon up-client event for 'doka'
Nov 18 10:42:54 vpnhost updown: Deleting interface upon down-client event for 'doka'
Nov 18 10:42:58 vpnhost updown: Creating interface upon up-client event for 'doka'
Nov 18 10:43:07 vpnhost updown: Deleting interface upon down-client event for 'doka'
Nov 18 10:43:15 vpnhost updown: Creating interface upon up-client event for 'doka'
</pre>
<p>which lead to few seconds break between down and up events (it's
another subject to research why these pairs are duplicated - I
mean two down/up events close to each other).</p>
<p>I've never heard about "refcounting" before :-) Could you,
please, give some links to an explanation?<br>
</p>
<blockquote type="cite"
cite="mid:8c1f8b55-dd3d-4450-80e6-b5723ac8e325@strongswan.org">
<pre class="moz-quote-pre" wrap="">While the updown script is called, the daemon's event bus is locked.
This pretty much makes any call from it to the daemon prone to
deadlocks. Note that vici clients that listen to events don't have that
problem because they are notified asynchronously.</pre>
</blockquote>
<p>Cool, thank you.
</p>
<blockquote type="cite"
cite="mid:8c1f8b55-dd3d-4450-80e6-b5723ac8e325@strongswan.org">
</blockquote>
<pre class="moz-signature" cols="72">--
Volodymyr Litovka
"Vision without Execution is Hallucination." -- Thomas Edison</pre>
</body>
</html>