Name

PIKE-518 — PIKE timeouts inconsistency

Severity

W (warning)

Message text

HELLO timeout (%1 sec) must be at least 2 secs higher than PING timeout

Description

The timeout of HELLO protocol must be longer than the longest PING timeout within the whole virtual cluster. Otherwise there is a risk of meaningless switching the roles in following scenario:

  • the network is down and it comes up

  • the Backup sends the ping request accidentaly immediately after the network comes up while the Master sent it immediately before

  • thus, the Backup detects network OK almost the whole PING timeout earlier than the Master (plus 1 second of the PING period)

  • if the HELLO timeout is too short, the Backup takes the Master role although the previous Master could continue working.

This message means that the particular VIRTUAL-CLUSTER section has such an inconsistency configured.

Check and correct the timeouts in the configuration.

See also

logging(7)

Authors

This man page is a part of Kernun Firewall.
Copyright © 2000–2023 Trusted Network Solutions, a. s.
All rights reserved.