[strongSwan-dev] HA resync issue

[Thomas Egerer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Emeric,

On 08/28/2014 11:00 AM, Emeric POUPON wrote:
> Hello,
> 
> I'm switching from the user to the dev mailing list as it is more appropriate for this issue.
> 
> When a node is reintegrating a HA cluster, the active node first sends all the IKE SA related messages. In my case, this is hundreds of messages, since there is
> hundreds of tunnels installed. On the passive node (Strongswan 5.2.0 on FreeBSD 9.2), I can see a lot of udp packet drops:
> 
> # netstat -s -p udp ... 575 dropped due to full socket buffers
thanks for sharing this piece of information with us. I would
have never thought of packet drops when it comes to a resync.
Good to know.


Cheers, Thomas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAlQA+CMACgkQ2/ggQBUI/sktFQCZAV2Mk9Ud2ND0rkiLTBPIAKmS
MK4Anio8fLk4dog+UydFIcG5p2EFuNV/
=6YnA
-----END PGP SIGNATURE-----