On Mon, 14 Dec 2020 11:16:16 -0500 Balaji Thoguluva <[email protected]> wrote:
> Hi Folks, > > What is the maximum configurable value of salifetime, ikelifetime, > rekeymargin, rekeyfuzz? salifetime=24h ikelifetime=24h rekeymargin doesn't have limits, other than it must be way shorter than lifetimes, default is 9m rekeyfuzz maximum is 100% - that is percentage of rekeymargin. So rekeying starts rekeymargin + rekeyfuzz before expiry of SA. With defaults 9m to 18m before expiry. -- Tuomo Soini <[email protected]> Foobar Linux services +358 40 5240030 Foobar Oy <https://foobar.fi/> _______________________________________________ Swan-dev mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-dev
