Project

General

Profile

Issue #2277

Switching between HA mode and non HA mode

Added by Ido Ramati about 5 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
high availability (ha plugin)
Affected version:
5.5.1
Resolution:
No feedback

Description

Hi,

I would like to know is it possible to switch between HA mode and non HA mode?
I have a setup with 2 encryptors where each one has a separate tunnel. I tried to reconfigure the configuration file for HA mode (including iptables, ipsec.conf, strongswan.conf etc.) and then run: "ipsec update" and "ipsec reload" adn "ipsec up <conn_name>".
It didn't switch to HA mode. Only ipsec restart on both entities switch to HA mode.
The same thing happened vice versa when I tried to switch from HA mode to non HA mode.

Is it possible to switch between modes just by changing configuration file and run "ipsec reload" or "ipsec update" commands? I would like to avoid restarting the whole strongswan ("ipsec restart").

Thanks,
Ido

History

#1 Updated by Tobias Brunner about 5 years ago

  • Category set to high availability (ha plugin)
  • Status changed from New to Feedback

That's currently not possible. The ha plugin is only initialized (or not initialized) when the daemon is restarted. In particularly disabling the plugin would be difficult at runtime.

#2 Updated by Noel Kuntze over 3 years ago

  • Status changed from Feedback to Closed
  • Resolution set to No feedback

Also available in: Atom PDF