mirror of
https://github.com/hwdsl2/docker-ipsec-vpn-server.git
synced 2026-04-26 01:55:53 +03:00
[GH-ISSUE #244] Fail-safe ikev2 #226
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @feelan03 on GitHub (Jul 6, 2021).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/244
Hello. I have a question, is it possible to make ikev2 fault-tolerant like it can be done with openvpn. To make openvpn fail-safe, you need to make a complete copy of the finished server, with all the certificates and if you specify the domain from two machines in the certificate, then balancing will work. Is it possible to do this on ikev2?
@hwdsl2 commented on GitHub (Jul 10, 2021):
@feelan03 Hello! For IKEv2, there is a feature called "redirect", which sounds similar to your use case. Please refer to:
https://libreswan.org/wiki/RFC_5685_-_Redirect_Mechanism
https://libreswan.org/man/ipsec.conf.5.html
I haven't used this before, you can search the Internet for examples, or ask on the Libreswan users mailing list:
https://lists.libreswan.org/mailman/listinfo/swan