Live Kernel Updates with IPsec Tunnels
Perform live kernel updates with active Internet Protocol Security (IPsec) tunnels

Perform live kernel updates with active Internet Protocol Security (IPsec) tunnels

12/16/2024 · Madan Chukka, Mansi Jaiswal

What this post added

Introduces the `ipsec_auto_migrate` attribute for IBM AIX live kernel updates, enabling the system to automatically manage IPsec tunnels and daemons during the update process. This feature, available in AIX 7.3 TL3 and later, addresses the previous limitation where active IPsec tunnels would cause live kernel updates to fail. The post details the mechanism of disabling IPsec on the source LPAR and re-enabling it on the surrogate LPAR, along with configuration instructions and a discussion of associated risks and limitations.

Read the original post ↗