<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Paul,<br>
Thanks for looking. Personally I am happy to wait for 3.28, but I
was trying to create a spec and it will need the 3.28 fixes
backported into the el7 release line.<br>
Regards,<br>
Nick<br>
<br>
<div class="moz-cite-prefix">On 03/05/2019 15:53, Paul Wouters
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:alpine.LRH.2.21.1905031048570.15688@bofh.nohats.ca">
<br>
On Fri, 3 May 2019, Nick Howitt wrote:
<br>
<br>
<blockquote type="cite">but here is the whole log.
<br>
</blockquote>
<br>
That's not a DPD issue, it is the auto=start + receiving delete
issue.
<br>
<br>
Your connection receives a delete and is deleted. So you have no
active
<br>
states, no IKE SA so no DPDs. It should have checked the the
auto=start
<br>
value, and does not realise it needs to start a new negotiation. A
fix
<br>
for that is in git master and will be part of 3.28. Unfortunately,
we
<br>
had a bandaid fix first, and then we removed the bandaid for a
proper
<br>
fix that also prevents an IKE storm (eg receiving delete,
initiate,
<br>
establish, receive delete, initiate, ....) so I have no easy
commit
<br>
for you to reference. But if you look through "git log" of the
master
<br>
tree, search for "revive" to find all related commits. Or wait for
<br>
3.28 to be released next week.
<br>
<br>
Paul
<br>
</blockquote>
<br>
</body>
</html>