Re: [strongSwan] DNS LoadBalancing and Failover

2018-09-16 Thread Markus P. Beckhaus
Hi, all the different approaches like local traffic LBs, client wrappers with gateway failure detection and even multiple simultaneous tunnels from the client to different gateways have been on the table, were evaluated and most of them are already in use in other projects successfully. The D

Re: [strongSwan] DNS LoadBalancing and Failover

2018-09-16 Thread Michael Schwartzkopff
Am 16.09.2018 um 13:23 schrieb Markus P. Beckhaus: > Hi Michael, > > thanks for your fast reply. The background of my question is to implement > failover with strongswan standard mechanisms wherever possible. > > In fact I do have *swan implementations in the field with wrappers for load > distri

Re: [strongSwan] DNS LoadBalancing and Failover

2018-09-16 Thread Markus P. Beckhaus
Hi Michael, thanks for your fast reply. The background of my question is to implement failover with strongswan standard mechanisms wherever possible. In fact I do have *swan implementations in the field with wrappers for load distribution and failover, but I'd rather get rid of as much individu

Re: [strongSwan] DNS LoadBalancing and Failover

2018-09-16 Thread Michael Schwartzkopff
Am 16.09.2018 um 09:34 schrieb Markus P. Beckhaus: > Dear all, > > we are thinking about using a DNS Load-Balancer to distribute a huge count of > strongswan clients to multiple VPN gatweways. Also, the DNS Load-Balancer > should detect the failure of VPN gateways and remove them from the DNS >

[strongSwan] DNS LoadBalancing and Failover

2018-09-16 Thread Markus P. Beckhaus
Dear all, we are thinking about using a DNS Load-Balancer to distribute a huge count of strongswan clients to multiple VPN gatweways. Also, the DNS Load-Balancer should detect the failure of VPN gateways and remove them from the DNS responses, thus poviding a kind of availability and failover.