[strongSwan] need help with strongswan HA setup

gaurav sharma gaurav19007 at gmail.com
Tue Nov 1 11:08:53 CET 2011

Hi Martin,
Appropriate your valuable inputs,
I am trying to apply kernal patches attached in the strongswan HA wiki link,
Can you please conform the linux kernal version for which these patches
were created. ?
I am not able to apply patches on kernal version as there are some

We also find that the changes required in ipt_CLUSTERIP.c file (Patch :
Extended CLUSTERIP module to use it on IPSec gateway) are only valid for
2.6.39 in the Strongswan git  repository and we may not able to apply the
same on 2.6.31.


On Fri, Oct 21, 2011 at 2:29 PM, gaurav sharma <gaurav19007 at gmail.com>wrote:

> Ok I understand now,
> Thank you very much for your precious time and help.
> Regards,
> Gaurav
> On Fri, Oct 21, 2011 at 2:14 PM, Martin Willi <martin at strongswan.org>wrote:
>> Hi,
>> > The HA setup supported by Strongswan is Active/Active or
>> > Active/standby ?
>> It supports Active/Active configurations, but each CHILD_SA is actually
>> Active/Passive. The active node might be different for each CHILD_SA,
>> resulting in a load sharing between the two nodes if you run more than a
>> single CHILD_SA.
>> You may also run on Active/Passive setup only be defining just a single
>> segment.
>> > Are there any document apart from Above link which can be refered for
>> > Strongswan HA?
>> No, the Wiki page is currently all we have.
>> Regards
>> Martin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20111101/a52fb24e/attachment.html>

More information about the Users mailing list