I narrowed it down further while having the issue again in PROD:
1) Moving the active router (replicated interface) does not seems to fix the issue once the service is DOWN and not working.
2) Doing a "openstack vpn service set --disable $SERVICE_ID" followed by a ""openstack vpn service set --enable $SERVICE_ID" does seem to fix things though.
So I strongly believe this is somewhat of a race condition or deadlock.
I narrowed it down further while having the issue again in PROD:
1) Moving the active router (replicated interface) does not seems to fix the issue once the service is DOWN and not working.
2) Doing a "openstack vpn service set --disable $SERVICE_ID" followed by a ""openstack vpn service set --enable $SERVICE_ID" does seem to fix things though.
So I strongly believe this is somewhat of a race condition or deadlock.