[strongSwan] High availability failover problem
unite
unite at openmailbox.org
Wed Mar 11 18:11:10 CET 2015
On 2015-03-11 10:35, Martin Willi wrote:
> Hi,
>
>> Is it essential for both nodes to receive all the ESP packets?
>
> Yes.
>
>> Cannot be ESP sequence numbers synchronized through the HA plugin?
>
> No, this is not how the HA plugin works. ESP sequence numbers move very
> fast, making a synchronization in userland difficult.
>
> You may try to synchronize sequence numbers by other means, but we
> don't
> provide any solution beyond our ClusterIP patches.
>
> Regards
> Martin
Thanks for your help, Martin. Now it's clear for me.
--
With kind regards,
Aleksey
More information about the Users
mailing list