Re: [smartos-discuss] Create network overlays after boot

2018-02-09 Thread Ján Poctavek
Hi Dan, Thank you for your hints, they are very valuable. The -h flag is a really good idea. And I'll also look deeper into ikeadm dump *. Regarding the DPD, lowering the p2_softlife_secs seems to do the job and works even after ikeadm flush on the remote node. Thanks. Jan On 8. 2. 2018

Re: [smartos-discuss] Create network overlays after boot

2018-02-08 Thread Ján Poctavek
Hi Dan, Yes we know about the IKEv2 and we'll be happy to try it. You might also be interested in our ansible playbook that sets up IPsec and overlays: https://github.com/erigones/esdc-ce/tree/master/ans/overlays And our simple IPSsec debug scripts:

Re: [smartos-discuss] Create network overlays after boot

2018-02-07 Thread Dan McDonald
I'm so glad to see you're using the built-in illumos IPsec features for your overlay improvements. If you don't already know, we're working on IKEv2 for illumos-via-SmartOS. As we move along with it, it would be interesting to have your feedback on it. Thanks for this update, and the

Re: [smartos-discuss] Create network overlays after boot

2018-02-07 Thread Daniel Kontsek
Hi Robert, Cody et al. Finally, we have released a version of Danube Cloud that is able to use network overlays. And together with IPSec there is now a way to control “remote nodes” in other physical datacenters (without the need of a dedicated L2 link). We are using the file search plugin and

[smartos-discuss] Create network overlays after boot

2017-10-31 Thread Daniel Kontsek
Hi, This post can be considered as continuation of https://www.mail-archive.com/smartos-discuss@lists.smartos.org/msg04922.html Overlay networking in SmartOS is great but the inability to configure them