Agreed, Iooked at this when creating a failover service, and trying to 
replicate all the TCP and TLS data ended up using significant CPU processing 
and network bandwidth that it wasn’t worth it; in addition to intrusive OpenSSL 
changes.

You should try to have a way to detect and re-establish a failed connection; 
it’s significantly easier to do, and requires no modification of the OpenSSL 
code. Alternatively, having two simultaneous connections might work out.
--
-Todd Short
// tsh...@akamai.com<mailto:tsh...@akamai.com>
// "One if by land, two if by sea, three if by the Internet."

On Aug 23, 2018, at 8:36 AM, Salz, Rich via openssl-users 
<openssl-users@openssl.org<mailto:openssl-users@openssl.org>> wrote:

>I want to take backup of existing ssl connection. Use this backup connection 
>in other slave board. This  backup include keys and sequence no, ssl version 
>etc.
>Is Openssl support any api to take backup of existing ssl connection?

No.  This is not currently possible, and is unlikely to ever happen in OpenSSL. 
 It’s too hard.
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to