Re: Statefull VPN failover a fork from "Re: iptables vs pf"

[Theo de Raadt]

Please note that at this time,

        sasyncd can fail IPSEC associations to a 2nd machine

        But not yet fail them back, when the master recovers

The developer of this stuff hasn't finished it yet.