sonic-swss icon indicating copy to clipboard operation
sonic-swss copied to clipboard

Fix to enable/disable Lag member interface quickly when macsec session is up/down

Open judyjoseph opened this issue 1 year ago • 0 comments

What I did

Set the Lag member state to enable/disable when the macsec session on the lag member interface go up/down.

Why I did it

Usually when macsec session goes down, since macsec is point to point -- th einterface also goes down and it is removed from LAG.

But in case the interface don't go down, and it is just macsec session that went down -- it waits for 90secs which is LACP timeout to get the interface out of LAG.

So with this fix -- macsec session timesout in 6sec .. and we immediately remove it out ot LAG, to minimize traffic imnpact.

How I verified it

Details if related

judyjoseph avatar Oct 03 '24 16:10 judyjoseph