OCF_HEARTBEAT_IPSEC(7)

💖 OCF_HEARTBEAT_IPSEC(7) 💖

okay bestie, sit down, hydrate, because we're about to talk about ocf_heartbeat_ipsec — yes it's a whole manual page (section 7, iykyk) and yes it's about IPSEC tunnels. slay

---

✨ NAME ✨

ocf_heartbeat_ipsec — handles IPSEC tunnels for VIPs 🎀

---

✨ SYNOPSIS ✨

ipsec [start | stop | monitor | meta-data]

---

✨ DESCRIPTION ✨

So like, this is a Resource Agent whose whole job is managing IPSEC tunnels that are associated with a Virtual IP Address. It's meant to be collocated with one specific VIP — they're a package deal, fr fr — and it handles setting up or taking down one specific tunnel. That's it. That's the gig. 💅

---

✨ SUPPORTED PARAMETERS ✨

• tunnel — the name of the tunnel we're monitoring, bestie. 👀 (unique, required, string, no default)
• vip — the Virtual IP address that the tunnel is using. (unique, required, string, no default)
• confdir — the directory where the IPSEC tunnel configs live. (optional, string, default "/etc/ipsec.d/")
• fallbacktunnel — the name of the tunnel to fall back to when the main tunnel gets put down. like a backup bestie 🫶 (unique, optional, string, no default)

---

✨ SUPPORTED ACTIONS ✨

this resource agent supports the following actions (operations), periodt:

• start — starts the resource. Suggested minimum timeout: 20s. ⭐
• stop — stops the resource. Suggested minimum timeout: 20s.
• monitor — performs a detailed status check. Suggested minimum timeout: 20s. Suggested interval: 10s. 🔍
• reload — suggested minimum timeout: 20s.
• meta-data — retrieves resource agent metadata (internal use only, don't touch unless you know what you're doing 🙈). Suggested minimum timeout: 5s.

---

✨ EXAMPLE CRM SHELL ✨

here's an example config for an ipsec resource using the crm(8) shell, copy it exactly pls:

primitive p_ipsec ocf:heartbeat:ipsec \
  params \
    tunnel=string \
    vip=string \
  op monitor timeout="20s" interval="10s" depth="0"

---

✨ EXAMPLE PCS ✨

and here's the same vibe but for pcs(8):

pcs resource create p_ipsec ocf:heartbeat:ipsec \
  tunnel=string \
  vip=string \
  op monitor timeout="20s" interval="10s" OCF_CHECK_LEVEL="0"

---

✨ SEE ALSO ✨

http://clusterlabs.org/ 🌈

---

✨ AUTHOR ✨

ClusterLabs contributors — and if you wanna know about individual authors, the resource agent source has the deets. 👑

---

and that's the whole page, no cap. go forth and tunnel responsibly. 🦋

this was resource-agents version UNKNOWN, dated 04/08/2026, and honestly? iconic. bye bestie, ily 💖✨🎀