[strongSwan-dev] [PATCH 0/5] Recover IKE_SA reset after successful IKE_SA_INIT

Thomas Egerer thomas.egerer at secunet.com
Tue Jun 29 14:40:19 CEST 2010


Hello Martin,
> Your approach looks fine to me. I'd prefer to keep the task creation
> outside of the task_manager [5], but this is purely a matter of taste.
apparently the placement of the recreation for the init and nat job for the
ike_sa isn't just a matter of taste. We have experienced a growing number of
queued IKE_INIT and IKE_NATD (one task for every reset of the ike_sa to be precise).
I'm not certain about how to solve this problem other than placing the recreation
of the two tasks right where I originally proposed it. The second alternative that
comes to mind -- extending the queue_task function by a boolean value that permits/
forbids a duplicate task insertion does neither look fancy nor does it convince me.

What's your suggestion?

Cheers,

Thomas

> [5]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=dbdb69f908c9ba2b61011fa5f70b948a8b2ae0cd





More information about the Dev mailing list