A method for separately managing control and data context for a secure connection comprising: receiving, by a second node, information regarding an active secure connection, wherein the active secure connection is routed through a first node and comprises a secure control plane connection based on control plane parameters associated with the active secure connection and a secure data plane connection based on data plane parameters associated with the active secure connection; programming, by the second node, a standby secure data plane connection using the data plane parameters associated with the active secure connection such that while the first node is active, the data planes on both the first and second nodes are in an active state and a control plane of the second node is in a standby state; storing, in a database, at least a subset of the control plane parameters associated with the active secure connection; and in response to a determination by the second node, by monitoring interfaces connected to the first node or monitoring route weights managed by decentralized route optimization techniques, that the first node is inactive: routing, by the second node, traffic associated with the active secure connection through the standby secure data plane connection; transitioning the control plane of the second node to a state recovery state; retrieving, by the second node, the at least a subset of the control plane parameters associated with the active secure connection; programming, by the second node, a new control plane connection based on the retrieved at least a subset of the control plane parameters associated with the active secure connection; and routing, by the second node, control plane traffic through the new control plane connection after the control plane of the second node has transitioned from the state recovery state to the active state. receiving, by a second node, information regarding an active secure connection, wherein the active secure connection is routed through a first node and comprises a secure control plane connection based on control plane parameters associated with the active secure connection and a secure data plane connection based on data plane parameters associated with the active secure connection; programming, by the second node, a standby secure data plane connection using the data plane parameters associated with the active secure connection such that while the first node is active, the data planes on both the first and second nodes are in an active state and a control plane of the second node is in a standby state; storing, in a database, at least a subset of the control plane parameters associated with the active secure connection; and in response to a determination by the second node, by monitoring interfaces connected to the first node or monitoring route weights managed by decentralized route optimization techniques, that the first node is inactive: routing, by the second node, traffic associated with the active secure connection through the standby secure data plane connection; transitioning the control plane of the second node to a state recovery state; retrieving, by the second node, the at least a subset of the control plane parameters associated with the active secure connection; programming, by the second node, a new control plane connection based on the retrieved at least a subset of the control plane parameters associated with the active secure connection; and routing, by the second node, control plane traffic through the new control plane connection after the control plane of the second node has transitioned from the state recovery state to the active state. routing, by the second node, traffic associated with the active secure connection through the standby secure data plane connection; transitioning the control plane of the second node to a state recovery state; retrieving, by the second node, the at least a subset of the control plane parameters associated with the active secure connection; programming, by the second node, a new control plane connection based on the retrieved at least a subset of the control plane parameters associated with the active secure connection; and routing, by the second node, control plane traffic through the new control plane connection after the control plane of the second node has transitioned from the state recovery state to the active state.