denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Add ha/active-passive-multi-ke scenario

Browse Source
This commit is contained in:
Jean-François Hren
2025-02-28 16:02:41 +01:00
committed by Tobias Brunner
parent e7848e36fa
commit fd6ac87fc3
17 changed files with 381 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ha/active-passive-multi-ke/description.txt
+8
View File
@@ -0,0 +1,8 @@
The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each using
multiple key exchanges to the virtual gateway <b>mars</b> implemented by the
two real gateways <b>alice</b> and <b>moon</b> in a <b>High Availability</b>
(HA) setup based on <b>ClusterIP</b>. The HA synchronization link between the
two gateways is secured by an IPsec transport connection. At the outset
<b>alice</b> is the active and <b>moon</b> is the passive gateway.
After <b>alice</b> gets killed <b>moon</b> automatically takes over
all existing IKE_SAs and CHILD_SAs.