config/sysinv/ipsec-auth
Andy Ning d662842c86 Decrease ipsec-config stop time
It is found that ipsec-config SM service takes about 57s to stop during
controller swact. This is caused by the blocking command
"swanctl --terminate" in ipsec-config's ocf script. This change added
"--force" option to the command so it will terminate IKE_SA without
waiting. The stop time is reduced to about 12s with this change.

Test Plan:
PASS: On a DX system, swact active controller, multiple times, verify
      the swact is successful, system is stable after swact, IPsec is
      properly configured and SAs are established as expected.
PASS: Multiple iterations of controlled and uncontrolled swact on HW
      labs, verify there are no issues arise.

Story: 2010940
Task: 51242

Change-Id: I68474c6373ccf1941d05943c9b3906b436e1f788
Signed-off-by: Andy Ning <andy.ning@windriver.com>
2024-11-01 09:46:04 -04:00
..
debian Add and Configure IPsec Config Service 2024-05-02 21:18:22 +00:00
files Decrease ipsec-config stop time 2024-11-01 09:46:04 -04:00