Re: [Swan-dev] IKEv2 rekey initiator failures

2020-04-08 Thread Paul Wouters
On Wed, 8 Apr 2020, Antony Antony wrote: I noticed sometimes a several rekeys would get queued up. And delete would stay in the queue for longer. I think it is best to prioritize v2D ahead CREATE_CHILD_SA. Also can't think of any side effect of pritorizing v2D. Why do you think that is best t

Re: [Swan-dev] IKEv2 rekey initiator failures

2020-04-08 Thread Andrew Cagney
On Wed, 8 Apr 2020 at 13:16, Antony Antony wrote: > On Wed, Apr 08, 2020 at 10:07:43AM -0400, Andrew Cagney wrote: > > > > > > On Wed, 8 Apr 2020 at 02:29, Antony Antony wrote: > > > > Hi, > > > > I am hunting a couple of corner cases, IKEv2 rekey initiator > failures. > > These issu

Re: [Swan-dev] IKEv2 rekey initiator failures

2020-04-08 Thread Antony Antony
On Wed, Apr 08, 2020 at 10:07:43AM -0400, Andrew Cagney wrote: > > > On Wed, 8 Apr 2020 at 02:29, Antony Antony wrote: > > Hi, > > I am hunting a couple of corner cases, IKEv2 rekey initiator failures.  > These issues appear when testing clones. Think of 100 IKEv2 Child SAs > unde

Re: [Swan-dev] IKEv2 rekey initiator failures

2020-04-08 Thread Andrew Cagney
On Wed, 8 Apr 2020 at 02:29, Antony Antony wrote: > Hi, > > I am hunting a couple of corner cases, IKEv2 rekey initiator failures. > These issues appear when testing clones. Think of 100 IKEv2 Child SAs > under > one IKE SA and rekeying them all. In the test rekey margin and salife are > short. S

[Swan-dev] IKEv2 rekey initiator failures

2020-04-07 Thread Antony Antony
Hi, I am hunting a couple of corner cases, IKEv2 rekey initiator failures. These issues appear when testing clones. Think of 100 IKEv2 Child SAs under one IKE SA and rekeying them all. In the test rekey margin and salife are short. Short values do not matter, because looking back in Tuomo prod