This looks cool! Bit surprised that even though there seems to be interest in IPSec in OpenBSD nobody ever finished sasyncd. Which is used to create an IPSec f

This looks cool! Bit surprised that even though there seems to be interest in IPSec in OpenBSD nobody ever finished sasyncd. Which is used to create an IPSec failover setup between OpenBSD hosts. However sasyncd was never fully finished. It can't sync existing SA states. Meaning the first failover works, but the second time you failover you are missing SA's.