[strongSwan-dev] [PATCH 0/5] Recover IKE_SA reset after successful IKE_SA_INIT
thomas.egerer at secunet.com
Tue Jun 29 14:40:19 CEST 2010
> Your approach looks fine to me. I'd prefer to keep the task creation
> outside of the task_manager , but this is purely a matter of taste.
apparently the placement of the recreation for the init and nat job for the
ike_sa isn't just a matter of taste. We have experienced a growing number of
queued IKE_INIT and IKE_NATD (one task for every reset of the ike_sa to be precise).
I'm not certain about how to solve this problem other than placing the recreation
of the two tasks right where I originally proposed it. The second alternative that
comes to mind -- extending the queue_task function by a boolean value that permits/
forbids a duplicate task insertion does neither look fancy nor does it convince me.
What's your suggestion?
More information about the Dev