[Openswan Users] keeping SA made OCF resource leak
paul at xelerance.com
Sat Jul 25 17:37:08 EDT 2009
On Wed, 22 Jul 2009, willer.wang at cybertan.com.tw wrote:
> 3. I don't know what's the purpose of OPENSWAN keeps all old outbound SAs all the time. Preventing to rebuild a same SA?
To ensure a seamless transition, the old receiving SA's are kept until
traffic arrives on the new SA. On the outgoing SA, I believe we drop
the old one as soon as we are ready to use the new one for traffic.
More information about the Users