Github user zeb209 commented on the pull request: https://github.com/apache/trafficserver/pull/189#issuecomment-96043182 No you don't. You just run "traffic_line -x" whenever you think they all have the new key. Some boxes will run "traffic_line -x" a few minutes later than the others. It does not matter. The number of session tickets encrypted with the new key will be small. Typically one rotation cycle is a few hours such as 24, or 36. A few seconds is like nothing.
--- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastruct...@apache.org or file a JIRA ticket with INFRA. ---