Skip to content

Commit

Permalink
Revert "Use ipsec service stop to flush xfrm state and policy"
Browse files Browse the repository at this point in the history
This reverts commit 7a1fdb1.
  • Loading branch information
pperiyasamy committed Oct 24, 2024
1 parent 7a1fdb1 commit f270525
Showing 1 changed file with 0 additions and 8 deletions.
8 changes: 0 additions & 8 deletions bindata/network/ovn-kubernetes/common/ipsec-host.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -246,14 +246,6 @@ spec:
# After a restart of this container (or on initial startup), we flush xfrm state and policy
# before we start pluto and ovs-monitor-ipsec in order to start in a known good state. This
# will result in a small interruption in traffic until pluto and ovs-monitor-ipsec start again.
# Let us stop ipsec service first and wait for few seconds.
# This allows pluto to:
# 1) destroy all inbound SA.
# 2) send delete payloads to the other side to let them close their SA and once replies are sent.
# 3) pluto destroy also outbound SA.
chroot /proc/1/root ipsec stop && sleep 30s
# Try flushing xfrm state and policy explicitly again. It may not have any effect as ipsec stop
# cleaned up those entries already.
ip x s flush
ip x p flush

Expand Down

0 comments on commit f270525

Please sign in to comment.