# Disabling the ipsec service

**URL:** <https://forums.suse.com/t/disabling-the-ipsec-service/5968>\
**Category:** Rancher 1.x\
**Created:** [March 25, 2017, 2:19pm UTC](https://forums.suse.com/t/disabling-the-ipsec-service/5968 "2017-03-25T14:19:33Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Romeo\_Mihalcea](https://avatars.discourse-cdn.com/v4/letter/r/dfb087/32.png) [@Romeo\_Mihalcea](https://forums.suse.com/u/Romeo_Mihalcea)\
**Post date:** [March 25, 2017, 2:19pm UTC](https://forums.suse.com/t/disabling-the-ipsec-service/5968/1 "2017-03-25T14:19:33Z")

</div>

My hosts run independently of each other and I’m not interested in a cloud formation of any sorts. Servers don’t need to communicate among them and all my services run with net=host. My question is, can I delete the `ipsec` services? It’s giving me nothing but trouble so far and every upgrade is painfully slow due to this service constantly crashing.

---

<div class="post-metadata">

**Author:** ![wmbutler](https://avatars.discourse-cdn.com/v4/letter/w/aca169/32.png) [@wmbutler](https://forums.suse.com/u/wmbutler)\
**Post date:** [April 3, 2017, 7:58pm UTC](https://forums.suse.com/t/disabling-the-ipsec-service/5968/2 "2017-04-03T19:58:51Z")

</div>

From your stack, choose upgrade:

 ![](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/9/9a115b45085c72bdcfd3510eff0da98ee72e828e.png)

Then, from Network, choose host:

 ![](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/2/2ca18c6f28411656f7265aff4dccd2637a8fdea5.png)

I don’t think there are any negatives to leaving the ipsec network in place.

---

<div class="post-metadata">

**Author:** ![Romeo\_Mihalcea](https://avatars.discourse-cdn.com/v4/letter/r/dfb087/32.png) [@Romeo\_Mihalcea](https://forums.suse.com/u/Romeo_Mihalcea)\
**Post date:** [April 13, 2017, 1:44pm UTC](https://forums.suse.com/t/disabling-the-ipsec-service/5968/3 "2017-04-13T13:44:32Z")

</div>

> all my services run with net=host

That’s done already. The negative is the fact that ipsec fails to start on 90 servers which brings down my rancher server, mysql server and also the scheduler server due to a crap load of info being sent back and forth every millisecond.

---

<div class="post-metadata">

**Author:** ![leodotcloud](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/leodotcloud/32/3103_2.png) [@leodotcloud](https://forums.suse.com/u/leodotcloud)\
**Post date:** [April 18, 2017, 6:06pm UTC](https://forums.suse.com/t/disabling-the-ipsec-service/5968/4 "2017-04-18T18:06:18Z")

</div>

@Romeo_Mihalcea Can you please find/ping me on [https://slack.rancher.io](https://slack.rancher.io)? I would like to collect some debug information from your setup and see how we can resolve your problem.