Cloudsec rekey and NDO failure

[kjdhghsghsfg]

Hi

Let's assume ACI Multi-site environment with Cloudsec. Assume ND/NDO cluster fails completely. Normally this does not affect data plane and (some) of the management can still be done via APICs.

Question: what happens to cloudsec rekey process? NDO has a role in the process. Will cloudsec continue using old keys until NDO cluster is restored ("forever")? Or will rekey fail and break inter-site connectivity? Or something else?

I do know that ND/NDO is a redundant cluster of multiple nodes but I have seen the entire cluster failing e.g. due to bugs.

Thanks

[Robert Burns · Accepted solution]

If NDO is unavailable in this situation, the existing Keys will continue to be used (indefinately) and intersight communication will continue to flow encrypted.  Once NDO comes back online, all switches will rekey as usual without intervention required.

Robert