[strongSwan-dev] HA resync issue
hakke_007 at gmx.de
Sat Aug 30 00:01:07 CEST 2014
-----BEGIN PGP SIGNED MESSAGE-----
On 08/28/2014 11:00 AM, Emeric POUPON wrote:
> I'm switching from the user to the dev mailing list as it is more appropriate for this issue.
> When a node is reintegrating a HA cluster, the active node first sends all the IKE SA related messages. In my case, this is hundreds of messages, since there is
> hundreds of tunnels installed. On the passive node (Strongswan 5.2.0 on FreeBSD 9.2), I can see a lot of udp packet drops:
> # netstat -s -p udp ... 575 dropped due to full socket buffers
thanks for sharing this piece of information with us. I would
have never thought of packet drops when it comes to a resync.
Good to know.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----
More information about the Dev