Re: [ovs-dev] [PATCH v2 4/9] ipsec: libreswan: Try to bring non-active connections up.

[Eelco Chaudron]

On 30 Oct 2024, at 14:50, Ilya Maximets wrote:

> Sometimes connections are getting loaded, but do not become active for
> some reason on a first try.  We can try and bring them up manually.
> However, if they are still not active after that, it's better to just
> remove the connection and try to add them from scratch, as there must
> be some internal issue in libreswan that doesn't allow these connections
> to actually become active.
>
> Note: Once the "defunct" connection is removed, the second connection
> for the same tunnel will also be removed as "half-loaded".  This ensures
> that all the shared SAs will also be cleaned up, so we can truly start
> from scratch.
>
> Signed-off-by: Ilya Maximets <i.maxim...@ovn.org>

This looks good to me.

Acked-by: Eelco Chaudron <echau...@redhat.com>

_______________________________________________
dev mailing list
d...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-dev