[strongSwan] High availability failover problem

Martin Willi martin at strongswan.org
Wed Mar 11 09:35:25 CET 2015


Hi,

> Is it essential for both nodes to receive all the ESP packets?

Yes.

> Cannot be ESP sequence numbers synchronized through the HA plugin?

No, this is not how the HA plugin works. ESP sequence numbers move very
fast, making a synchronization in userland difficult.

You may try to synchronize sequence numbers by other means, but we don't
provide any solution beyond our ClusterIP patches.

Regards
Martin




More information about the Users mailing list