d662842c86
It is found that ipsec-config SM service takes about 57s to stop during
controller swact. This is caused by the blocking command
"swanctl --terminate" in ipsec-config's ocf script. This change added
"--force" option to the command so it will terminate IKE_SA without
waiting. The stop time is reduced to about 12s with this change.
Test Plan:
PASS: On a DX system, swact active controller, multiple times, verify
the swact is successful, system is stable after swact, IPsec is
properly configured and SAs are established as expected.
PASS: Multiple iterations of controlled and uncontrolled swact on HW
labs, verify there are no issues arise.
Story: 2010940
Task: 51242
Change-Id: I68474c6373ccf1941d05943c9b3906b436e1f788
Signed-off-by: Andy Ning <andy.ning@windriver.com>
config
The starlingx/config repository handles the StarlingX configuration management services.
Its key component is the System Inventory Service (Sysinv), which provides the system command-line interface (CLI)1.
This repository is not intended to be developed standalone, but rather as part of the StarlingX Source System, which is defined by the StarlingX manifest2.