[strongSwan] High availability failover problem

unite unite at openmailbox.org
Wed Mar 11 18:11:10 CET 2015


On 2015-03-11 10:35, Martin Willi wrote:
> Hi,
> 
>> Is it essential for both nodes to receive all the ESP packets?
> 
> Yes.
> 
>> Cannot be ESP sequence numbers synchronized through the HA plugin?
> 
> No, this is not how the HA plugin works. ESP sequence numbers move very
> fast, making a synchronization in userland difficult.
> 
> You may try to synchronize sequence numbers by other means, but we 
> don't
> provide any solution beyond our ClusterIP patches.
> 
> Regards
> Martin

Thanks for your help, Martin. Now it's clear for me.

-- 
With kind regards,
Aleksey


More information about the Users mailing list