[strongSwan] Current Status of High Availability Extension

[Stinner, Thomas]

Hi Martin,

thanks for the fast response. 

I am currently doing some initial tests with OpenSuSE 13.1 and so far they look very promising. I can connect to the cluster and packets are forwarded from the outside to the inside network. 

I am currently not sure how to setup the LAN side of the IPSec Gateway. I have defined a virtual IP on the inside network similar to the virtual ip on the outside network, except that i defined a --local-node 0 and a --local-node 1.

But, how does CLUSTERIP know that it needs to process the packages?

Since we only have a few tunnels active synchronization shouldn't be a big problem.  

Greetings 
Thomas