Sasyncd status?

[dhatz]

What is the current status regarding "stateful" IPsec VPN fail-over ?

[jimp]

I'm not sure that works with racoon. I know we have talked about syncing to a shared file somehow, but I don't know how long that might take to implement.

[dhatz]

I asked because I see several references to sasyncd in /etc/inc/vpn.inc source code.

[jimp]

From the commit logs it looks like it was abandoned at least 5 years ago.

[eri--]

The problem with it are the not supported synchronization of replay counter in FreeBSD.