Re: bgpd: better tcp md5sig handling

2019-05-28 Thread Claudio Jeker
On Tue, May 21, 2019 at 05:59:18PM +0200, Claudio Jeker wrote: > Hi, > > The last refactor of the pfkey handling uncovered an issue deep down in > the pfkey handling. Some long time ago henning@ added a sleep(1) into > pfkey_md5sig_establish(). This is now hunting us back because bgpd ends up > wi

bgpd: better tcp md5sig handling

2019-05-21 Thread Claudio Jeker
Hi, The last refactor of the pfkey handling uncovered an issue deep down in the pfkey handling. Some long time ago henning@ added a sleep(1) into pfkey_md5sig_establish(). This is now hunting us back because bgpd ends up with no tcp md5sig flow for 1 sec while a connection is established. Because