That's right. I just realised it. Apologies for the spam. > On 8 Apr 2021, at 09:36, Reid Wahl <nw...@redhat.com> wrote: > > Hi, Ryszard. > > I believe you may have mailed the wrong list by mistake, as your question > doesn't appear related to the ClusterLabs project. Perhaps someone here might > know though. > > On Thursday, April 8, 2021, Ryszard Styczynski <rstyczyn...@gmail.com > <mailto:rstyczyn...@gmail.com>> wrote: > > Hello, > > > > I'm looking for IPsec state machine implemented in Libreswan. I may guess > > how states are correlated, but having a state machine will give me a final > > answer. > > > > My current question is what is a next state after STATE_QUICK_R2? Should > > IPsec engine wait for rekeying? How long? How many times should repeat > > waiting step? Should go back to STATE_MAIN and delete SA? When? > > > > I currently see i my system that: > > 1. STATE_QUICK_R2 may go to STATE_MAIN_R3, delete SA, and reestablish > > connection from Phase 1 - it happens after 15 seconds > > 2. STATE_QUICK_R2 may go to STATE_QUICK_R1 and process rekeying - it > > happens when peer responds quicker than 15 seconds > > > > How to understand why sometimes SA is deleted (what causes 5 minutes line > > drop), and sometimes rekeying is completed? How to control time limits? > > > > Thanks, > > Ryszard > > _______________________________________________ > > Manage your subscription: > > https://lists.clusterlabs.org/mailman/listinfo/users > > <https://lists.clusterlabs.org/mailman/listinfo/users> > > > > ClusterLabs home: https://www.clusterlabs.org/ > > <https://www.clusterlabs.org/> > > > > > > -- > Regards, > > Reid Wahl, RHCA > Senior Software Maintenance Engineer, Red Hat > CEE - Platform Support Delivery - ClusterHA >
_______________________________________________ Manage your subscription: https://lists.clusterlabs.org/mailman/listinfo/users ClusterLabs home: https://www.clusterlabs.org/
